vulnerable-plugin-checker

AVOID – NO LONGER KEPT UP-TO-DATE

It seems that this plugin is producing a whole lot false positive as it does not evaluate base64 entries which often get used i.e. by nearly all 100 WPMUDEV plugins. „VPC: One or more plugins currently installed have known vulnerabilities with their current version. I suggest updating each vulnerable plugin if an update is available“ Many other security scanners incl Sucuri have no problem with that! And 5-star ratings by its own developers does not mean that this plugin does anything. I would suggest leaving the rating of your plugins to other people! Kind regards Toremo

The plugin is very useful to see which plugins have known vulnerabilities. On WordPress multisite, however, it displays this information in the site admin backends instead of the network admin backend. That makes it a bit less useful, because the network admins cannot see the information when they are in the network admin backend.

I use it on all of my sites, definitely recommend this plugin to all developers!

I can say it has made me feel safer when hosting sites. I get alerted before a hack takes place as I have dealt with hacked sites for far too long. I haven’t dealt with a hacked site running my plugin. Plugin vulnerabilities are the easiest way for a hacker to get into your site/server.

Great plugin. Works just as expected with no additional setup needed