MainWP Vulnerability Checker

MainWP Vulnerability Checker scans plugins and themes on your Child Sites for known vulnerabilities using the free MainWP NVD API or the paid WPScan API, all from your MainWP Dashboard.

Version5.0.4
Last UpdatedJanuary 10, 2026
TypeWordPress Plugin
LicenseGPL v2 or later
Live DemoView demo →

Or join VIP and download this plus every other theme & plugin for free.

Already a member? Log in

100% GPL · Original files · Unlimited sites

  • Original, unmodified files — delivered exactly as distributed by the developer
  • GPL licensed — use it on unlimited websites, personal or client
  • Free updates — new versions appear here as soon as they are released
  • Verified downloads — every file is integrity-checked (SHA-256) before release

Distributed under the GNU General Public License. Not affiliated with the original developer; official support, license keys and developer-hosted services (such as one-click updates) are available only from the developer.

Secure checkout with PayPal · GPL licensed · Instant download

Description

MainWP Vulnerability Checker is a WordPress plugin that checks plugins and themes across your MainWP network against vulnerability databases. It works with either the free MainWP NVD API or the paid WPScan Vulnerability Database API to report vulnerable plugins and themes on your Child Sites. You review and manage those findings from your MainWP Dashboard.

Key Features

  • Vulnerability scanning – The extension checks the plugins and themes installed on your Child Sites against vulnerability databases so you can see which ones have known issues.
  • NVD API support – You can use the free MainWP NVD API, built by the National Institute of Standards and Technology, to look up vulnerability data.
  • WPScan API support – Alternatively, you can connect the paid WPScan Vulnerability Database API for vulnerability information maintained by WordPress security experts.
  • Dashboard management – All vulnerability information is collected on your MainWP Dashboard, so you do not have to open each Child Site separately.
  • Ignore false positives – When a scan flags something that is not actually a problem, you can mark it with the Ignore function so it stays out of later scans.
  • Real-time updates – Both supported APIs provide current vulnerability information, so the results you see reflect recent data.

Who Is It For

This extension is for web developers and agencies who manage multiple WordPress sites through MainWP and need to keep track of vulnerable plugins and themes across their Child Sites. It suits anyone who wants to review and act on security findings from a single MainWP Dashboard.