Vulnerabilities Scan

Introduction

Security is a major issue for any WordPress site. A plugin, a theme or even the WordPress version itself may contain vulnerabilities, exposing the site to the risk of attack. To address this problem, we've developed the Vulnerabilities Scan within WPMasterToolKit. This module continuously analyzes your WordPress installation and detects security flaws in the CMS core, plugins and installed themes.

Discover the module : Link shortener

Which plug-in can the Vulnerabilities Scan module replace?

This module can replace specialized plugins such as WPScan, Wordfence Security or Patchstackwhich offer similar vulnerability scanning features. With WPMasterToolKitYou benefit from a lightweight solution integrated directly into your WordPress dashboard.

Main functions of the Vulnerabilities Scan module

1. Automatic vulnerability scanning

The module regularly scans your site for :

• WordPress version installed
• Plugins enabled and disabled
• Installed themes

2. Display vulnerabilities directly in the administration panel

If a vulnerability is detected :

• An alert is displayed in the WordPress administration

  

• A detailed report is available in a dedicated sub-menu
• Warnings are displayed under affected plugins in the list of extensions.

3. Access to vulnerability details

For each problem detected, the module provides :

• The name of the element concerned (plugin, theme, WordPress Core)
• The affected version
• Patch status (fixed or not)
• A link to more information (vulnerability database)

4. Background execution and cache management

The scan runs automatically via a daily cron event. Results are cached so as not to impact site performance.

Discover the module : Force SSL

How to use this module

1. Activation
   • See you in WPMasterToolKit > Modules
   • Activate the Vulnerabilities Scan
2. Access to results
   • A dedicated page has been added to the WPMasterToolKit > Vulnerabilities Scan
   • View the list of detected vulnerabilities and recommended actions

   

3. Checking for vulnerable plugins
   • An alert is displayed under the plugins concerned in the Extensions
   • Click on the alert for more information

   

Technical choices

1. Using the WPMTK API

The module directly queries our REST API. This API contains an updated database of known vulnerabilities.

2. Caching results

The scan results are temporarily stored in a transient WordPress to avoid unnecessary requests and improve performance.

3. Application of filters and actions

The module offers a filter wpmastertoolkit/vulnerabilities_scan/show_notice allowing developers to disable the display of alerts if necessary.

add_filter('wpmastertoolkit/vulnerabilities_scan/show_notice', function($show_notice) {
    return false;
});

Conclusion

The module Vulnerabilities Scan from WPMasterToolKit is an effective solution for monitoring the security status of your WordPress site. By integrating this functionality into an all-in-one plugin, we avoid the installation of additional third-party plugins, guaranteeing better control over performance and security.

Activate now Vulnerabilities Scan and make sure your site is protected against known threats!