WPScan – WordPress Security Scanner

The WPScan WordPress Security Scanner is a unique security plugin for WordPress that uses its own manually curated WPScan WordPress Vulnerability Database to scan for vulnerabilities.

Although it is no longer actively supported for nonenterprise customers, it is recommended to use it in conjunction with Jetpack Protect, a free security plugin.

The WPScan plugin scans your site and warns you about vulnerabilities, keeping your site one step ahead of security threats and malware.

It includes options to schedule automated daily scans and to send email notifications.

The plugin requires a free API token for use and allows 25 API requests per day under the Free plan.