Active plugin check
Active plugin versions are checked against known vulnerability records.
Free feature
Vulnerability scannerfor active plugins and theme
An active plugin or theme can gain a known vulnerability long after you installed it. Bearmor checks the active components against the WPVulnerability database and tells you what needs attention.
What it does
Vulnerability scanner
Every day it checks active plugin versions and the active theme against known vulnerability records. Severity is shown as critical, high, medium or low. WordPress core and inactive components are not claimed by this scan.
Active theme check
The active theme is checked too.
Severity and context
See how serious the disclosed issue is and which active component is affected.
Why it is there
What happens without it
New holes get disclosed constantly. That contact form you have had for years? A researcher may have found SQL injection in it last week. Without scanning you would not know until something bad happens.
Disclosure to bots
A vulnerability is disclosed, exploit code can follow within hours, and bots start scanning. You need to know quickly.
Abandoned plugins
The developer left. Holes get found and never patched. You are still running it.
Every version behind
Every version you skip is another set of known exploits that work on your site.
30 plugins
You are not going to check each one against CVE lists every day.
Daily checks show when an active plugin or the active theme matches a known record: what is vulnerable and how serious it is. Finding a hole is step one. On a care plan we patch it. With the plugin alone, you still have to update. This is not the same as a malware scan.
Free in the plugin. Patching is included with maintenance.
Use Bearmor Security on your WordPress
Install the free plugin from WordPress.org. Every feature is free, with no paid plan to unlock.