WPSec - WordPress Security Scanner

is a free online WordPress security scan for detecting and reporting WordPress vulnerabilities. No installation required #SaaS

[WPSec - WordPress Security Scanner @WPSecScanner]

How to Find Vulnerabilities in WordPress Plugins with Static Analysis and AI Tools: https://t.co/rfHZQ9gk3O

#bugbounty #wordpress #bugbountytip #cybersecurity #blueteam

#infosec
#pentesting
#ethicalhacking
#vulnerability
#appsec
#wordpresssecurity
#websecurity
#securecoding
#staticanalysis

#ai
#securityresearch
#devsecops
#programming
#php

[WPSec - WordPress Security Scanner @WPSecScanner]

A plugin author fixes a security bug and writes "General bug fixes". No CVE, no advisory, and your scanner stays quiet

We now read every new WordPress plugin release ourselves. 21% of the security fixes we confirmed were silent.

https://t.co/PkXuMcKqaA

[WPSec - WordPress Security Scanner @WPSecScanner]

We found a backdoor WordPress-plugin communicating with:
* update.02may2024[.]com - Update metadata and code packages
* heartbeat.02may2024[.]com - Site, plugin and version inventory
* log.02may2024[.]com - Error reporting

Anyone seem these? Plugin name was WP-Spam Shield Pro

[WPSec - WordPress Security Scanner @WPSecScanner]

Introducing TLS Health: A Deep HTTPS Check for Your WordPress Site

https://t.co/WtMpLJ457t

#WordPress #CyberSecurity #TLS #SSL

[WPSec - WordPress Security Scanner @WPSecScanner]

@johnumorujo Yes, I'm a real human. But scanning is also important, not just pentesting

[WPSec - WordPress Security Scanner @WPSecScanner]

@johnumorujo Sorry, CVE-2026-6433 does not affect the events calendar

[WPSec - WordPress Security Scanner @WPSecScanner]

@johnumorujo Also remember that you can use https://t.co/lFLv4QOqwg for scanning wordpress websites for free! We scan for CVE-2026-78006, CVE-2026-78159 and CVE-2026-6433 that affects The Events Calendar

[WPSec - WordPress Security Scanner @WPSecScanner]

We checked 14,114 WordPress sites. Nearly half had issues a version-based vulnerability scan wouldn’t catch!

Meet WPSec Site Security: checks for exposed files and configuration gaps, plus an A–F security grade.

See how it works: https://t.co/BIjWizla6E

[WPSec - WordPress Security Scanner @WPSecScanner]

Your WordPress Vulnerability Scan Came Back Clean. Are You Still Exposed?

https://t.co/a8G015jbMp

#WordPress #AttackSurface #CyberSecurity

[WPSec - WordPress Security Scanner @WPSecScanner]

Your WordPress Vulnerability Scan Came Back Clean. Are You Still Exposed?

https://t.co/a8G015jbMp

#WordPress #AttackSurface #CyberSecurity

[WPSec - WordPress Security Scanner @WPSecScanner]

How to Find Vulnerabilities in WordPress Plugins with Static Analysis and AI Tools: https://t.co/rfHZQ9gk3O

#bugbounty #wordpress #bugbountytip #cybersecurity #blueteam

#infosec
#pentesting
#ethicalhacking
#vulnerability
#appsec
#wordpresssecurity
#websecurity
#securecoding
#staticanalysis

#ai
#securityresearch
#devsecops
#programming
#php

[WPSec - WordPress Security Scanner @WPSecScanner]

@BaikareSandeep yep!

[WPSec - WordPress Security Scanner @WPSecScanner]

Is WordPress Secure?

https://t.co/FMoJCCjhgu

#WordPress #CyberSecurity

[WPSec - WordPress Security Scanner @WPSecScanner]

The Full Story of CVE-2024-10924: Authentication Bypass in the Really Simple Security Plugin:
https://t.co/ZFwZIa6UJt

#WordPressSecurity
#WordPress
#AuthenticationBypass
#SecurityAlert
#Cybersecurity
#Infosec
#PluginVulnerability
#UpdateNow
#PatchNow
#WebSecurity
#WPPlugins
#SiteSecurity

[WPSec - WordPress Security Scanner @WPSecScanner]

Our wpsec-cli is now updated to version 0.5.0: https://t.co/9x82S78zE3

[WPSec - WordPress Security Scanner @WPSecScanner]

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited: https://t.co/JW4YVVXgvd

#WordPress #Security #CyberSecurity

[WPSec - WordPress Security Scanner @WPSecScanner]

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited: https://t.co/JW4YVVXgvd

#WordPress #Security #CyberSecurity

[WPSec - WordPress Security Scanner @WPSecScanner]

The Full Story of CVE-2024-6386: Remote Code Execution in WPML:

https://t.co/oli4Y7ruFM

#wordpress #vulnerability #CVE #RCE #RemoteCodeExecution #WPML #CyberSecurity #Security

[WPSec - WordPress Security Scanner @WPSecScanner]

Listen to our new AI-generated WordPress song: https://t.co/OW2Ty9KwoN

#WordPress #CyberSecurity #Hackers

[WPSec - WordPress Security Scanner @WPSecScanner]

Listen to our new AI-generated WordPress song: https://t.co/OW2Ty9KwoN

#WordPress #CyberSecurity #Hackers