[{"name":"WPScan – WordPress Security Scanner","slug":"wpscan","version":"1.16","author":"WPScan Team","author_profile":"https://profiles.wordpress.org/ethicalhack3r/","requires":"3.4","tested":"6.6.2","requires_php":"5.5","requires_plugins":[],"rating":76,"ratings":{"1":7,"2":0,"3":3,"4":0,"5":18},"num_ratings":28,"support_threads":0,"support_threads_resolved":0,"downloaded":235217,"last_updated":"2024-08-14 3:37am GMT","added":"2019-03-02","homepage":"http://wordpress.org/plugins/wpscan/","sections":{"description":"

Please note: This plugin is no longer actively supported for non-enterprise customers. We recommend using Jetpack Protect – a free security plugin for WordPress that leverages the extensive database of WPScan. Jetpack Protect scans your site and warns you about vulnerabilities, keeping your site one step ahead of security threats and malware.

The WPScan WordPress security plugin is unique in that it uses its own manually curated WPScan WordPress Vulnerability Database. The vulnerability database has been around since 2014 and is updated on a daily basis by dedicated WordPress security specialists and the community at large. The database includes more than 21,000 known security vulnerabilities. The plugin uses this database to scan for WordPress vulnerabilities, plugin vulnerabilities and theme vulnerabilities, and has the options to schedule automated daily scans and to send email notifications.

WPScan has a Free API plan that should be suitable for most WordPress websites, however, also has paid plans for users who may need more API calls. To use the WPScan WordPress Security Plugin you will need to use a free API token by registering here.

The Free plan allows 25 API requests per day. View the different available API plans.

How many API requests do you need?

Our WordPress scanner makes one API request for the WordPress version, one request per installed plugin and one request per installed theme.
On average, a WordPress website has 22 installed plugins.
The Free plan should cover around 50% of all WordPress websites.

Security Checks

The WPScan WordPress Security Plugin will also check for other security issues, which do not require an API token, such as:

Check for debug.log files
Check for wp-config.php backup files
Check if XML-RPC is enabled
Check for code repository files
Check if default secret keys are used
Check for exported database files
Weak passwords
HTTPS enabled

What does the plugin do?

Scans for known WordPress vulnerabilities, plugin vulnerabilities and theme vulnerabilities;
Does additional security checks;
Shows an icon on the Admin Toolbar with the total number of security vulnerabilities found;
Notifies you by mail when new security vulnerabilities are found.

1.16

Allow report to be POST-ed to webhook URL or downloaded as JSON.

1.15.7

Fix the way the plugin handles extension versions to be more accurate.

1.15.6

Added a notice pointing regular users to Jetpack Protect

1.15.5

Update “Tested up to”
Some minor text changes
Fix API conflict

1.15.4

Fix images not loading on some hosted websites
Update remediation links

1.15.3

Fix fatal error in security checks

1.15.2

Improve HTML and PDF report output
Disable security checks setting
Some refactoring

1.15.1

Improved email alert text
Improved PDF report download layout

1.15

Fix memory_limit when using list_files()
Use Action Scheduler
Add security check remediation links

1.14.4

Use new free API defaults
Remove “Not found in database” message

1.14.3

Don’t use HTTP_HOST in db exports check

1.14.2

Revert DISABLE_WP_CRON check
Fix HTTPS check

1.14.1

Use the wp_check_password() function to check for weak passwords

1.14

Uses the status endpoint to get account data
Fixes the account status not being updated unless a scan is performed when the API token is updated/set
Adds vulnerability found hook
New security check: Check for weak user passwords
New security check: HTTPS
Clear plan info if API Token set to null
Fixes automated scanning when plugin deactivated and reactivated
Fixes cron job not being created when using the WPSCAN_API_TOKEN constant
Change default scanning time to the current time
Many other small improvements

1.13.2

Fix XML-RPC check false positive

1.13.1

Fix potential WP_Error issue in XML-RPC check
Add version to client side CSS and JS
Work towards PHP WordPress coding standards

1.13

Improve the XML-RPC security check
No longer run a scan when adding an API token
Other small improvements & bug fixes

1.12.3

Improve WPScan API error handling
Add status URL on WPScan API errors
Delete doing_cron transient on plugin activation
Replace the xmlrpc_encode_request() PHP function
Blur API token setting input box

1.12.2

Fix bug: case statement should ‘break’

1.12.1

Fix bug: Handle 404 API errors

1.12

Code Refactoring
Adds Security Check System
Check for debug.log files
Check for wp-config.php backups
Check if XMLRPC is enabled
Check if default keys are used in wp-config.php
Check for code repo files .svn and .git
Create a Vulnerabilities to Ignore meta-box
Fixes Theme closed incorrect message and position in report
Show message if API is not working
Timeout cron jobs
Fix 404 error in devtools

1.11

Change references of wpvulndb to wpscan.com

1.10

Add WPSCAN_DISABLE_SCANNING_INTERVAL constant to disable automated scanning
Add an option in the settings to ignore items
Add an option in the settings to set the scan time
Show a not found in database message
Other minor bug fixes

1.9

Add scanning interval option to settings page
Some other small improvements

1.8

Show severity ratings for Enterprise users
Show Plugin Closed label
Add PDF report download
Add account status meta box
Add support for API token constant in wp-config.php file
Show vulnerabilities in Site Health
Update menu icon to monochrome

1.7

Updated text and messages to reduce confusion
Removed WPScan_JWT class as no longer required

1.6

Use the new slug helper method on all items on the page

1.5

Better slug detection before calling the API

1.4

Prevent multiple tasks to run simultaneously
Check Now Button disabled and Spinner icon displayed when a task is already running
Results page automatically reloaded when Task is finished (checked every 10s)

1.3

Use the /status API endpoint to determine if the Token is valid. As a result, a call is no longer consumed when setting/changing the API token.
Trim and remove potential leading ‘v’ in versions when comparing then with the fixed_in values.

1.2

Add notice about paid licenses

1.1

Warn if API Limit was hit

1.0

First release.

\n","screenshots":"

$\"List$
List of vulnerabilities and icon at Admin Bar.
$\"Notification$
Notification settings.
$\"Site$
Site health page.

"},"short_description":"WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.","download_link":"https://downloads.wordpress.org/plugin/wpscan.1.16.zip","screenshots":{"1":{"src":"https://ps.w.org/wpscan/trunk/screenshot-1.png?rev=3135233","caption":"List of vulnerabilities and icon at Admin Bar."},"2":{"src":"https://ps.w.org/wpscan/trunk/screenshot-2.png?rev=3135233","caption":"Notification settings."},"3":{"src":"https://ps.w.org/wpscan/trunk/screenshot-3.png?rev=3135233","caption":"Site health page."}},"tags":{"hack":"hack","security":"security","vulnerability":"vulnerability","wpscan":"wpscan","wpvulndb":"wpvulndb"},"versions":{"1.0":"https://downloads.wordpress.org/plugin/wpscan.1.0.zip","1.1":"https://downloads.wordpress.org/plugin/wpscan.1.1.zip","1.10":"https://downloads.wordpress.org/plugin/wpscan.1.10.zip","1.11":"https://downloads.wordpress.org/plugin/wpscan.1.11.zip","1.12":"https://downloads.wordpress.org/plugin/wpscan.1.12.zip","1.12.1":"https://downloads.wordpress.org/plugin/wpscan.1.12.1.zip","1.12.2":"https://downloads.wordpress.org/plugin/wpscan.1.12.2.zip","1.12.3":"https://downloads.wordpress.org/plugin/wpscan.1.12.3.zip","1.13":"https://downloads.wordpress.org/plugin/wpscan.1.13.zip","1.13.1":"https://downloads.wordpress.org/plugin/wpscan.1.13.1.zip","1.13.2":"https://downloads.wordpress.org/plugin/wpscan.1.13.2.zip","1.14":"https://downloads.wordpress.org/plugin/wpscan.1.14.zip","1.14.1":"https://downloads.wordpress.org/plugin/wpscan.1.14.1.zip","1.14.2":"https://downloads.wordpress.org/plugin/wpscan.1.14.2.zip","1.14.3":"https://downloads.wordpress.org/plugin/wpscan.1.14.3.zip","1.14.4":"https://downloads.wordpress.org/plugin/wpscan.1.14.4.zip","1.15":"https://downloads.wordpress.org/plugin/wpscan.1.15.zip","1.15.1":"https://downloads.wordpress.org/plugin/wpscan.1.15.1.zip","1.15.2":"https://downloads.wordpress.org/plugin/wpscan.1.15.2.zip","1.15.3":"https://downloads.wordpress.org/plugin/wpscan.1.15.3.zip","1.15.4":"https://downloads.wordpress.org/plugin/wpscan.1.15.4.zip","1.15.5":"https://downloads.wordpress.org/plugin/wpscan.1.15.5.zip","1.15.6":"https://downloads.wordpress.org/plugin/wpscan.1.15.6.zip","1.15.7":"https://downloads.wordpress.org/plugin/wpscan.1.15.7.zip","1.16":"https://downloads.wordpress.org/plugin/wpscan.1.16.zip","1.2":"https://downloads.wordpress.org/plugin/wpscan.1.2.zip","1.3":"https://downloads.wordpress.org/plugin/wpscan.1.3.zip","1.4":"https://downloads.wordpress.org/plugin/wpscan.1.4.zip","1.5":"https://downloads.wordpress.org/plugin/wpscan.1.5.zip","1.6":"https://downloads.wordpress.org/plugin/wpscan.1.6.zip","1.7":"https://downloads.wordpress.org/plugin/wpscan.1.7.zip","1.8":"https://downloads.wordpress.org/plugin/wpscan.1.8.zip","1.9":"https://downloads.wordpress.org/plugin/wpscan.1.9.zip","trunk":"https://downloads.wordpress.org/plugin/wpscan.zip"},"donate_link":"","icons":{"1x":"https://ps.w.org/wpscan/assets/icon.svg?rev=2678582","svg":"https://ps.w.org/wpscan/assets/icon.svg?rev=2678582"}},{"name":"Servebolt Optimizer","slug":"servebolt-optimizer","version":"3.5.37","author":"Servebolt","author_profile":"https://profiles.wordpress.org/servebolt/","requires":"4.9.2","tested":"6.6.2","requires_php":"7.4","requires_plugins":[],"rating":100,"ratings":{"1":0,"2":0,"3":0,"4":0,"5":4},"num_ratings":4,"support_threads":0,"support_threads_resolved":0,"downloaded":64241,"last_updated":"2024-09-11 7:58am GMT","added":"2018-01-15","homepage":"","sections":{"description":"

The Servebolt Optimizer plugin adds functionality to implement Servebolt’s best practices for WordPress. This includes database optimizations, errorlog review, automatic cache purging, automatic image optimization and resizing, performance recommendations, and support for down stream HTML caching.

Specifically, Servebolt Optimizer does two things for your site:

It connects your WordPress hosted or WooCommerce hosted Servebolt site to your Servebolt Control Panel.
Its features implement Servebolt’s best practices for performance. These best practizes include database optimizations, error log review, automatic cache purging, automatic image optimization/resizing, performance recommendations and support for down stream HTML caching.

This project is maintained on Github.

Features

Configures HTML caching to speed up your site (Servebolt clients only)
Integrates with Accelerated Domains (Servebolt clients only)
Rewrite headers to allow down stream HTML caching (Servebolt clients only)
View Apache/PHP error log (Servebolt clients only)
Database optimization – Convert tables to InnoDB
Database optimization – Add performance improving indexes
Automatic cache purge for Cloudflare and Accelerated Domains
Recommendations on additional performance improvements
Multi-site support
WP CLI support
Cloudflare Image Resize-support (beta feature)
WP Rocket compatability (Servebolt clients only)

Read more about the plugin and all its features in our Help Center.

Accelerated Domains

The integration with our revolutionairy add-on performance and security enhancing service Accelerated Domains is made possible by Servebolt Optimizer. Installing the Servebolt Optimizer will provide the required HTTP headers to make use of Accelerated Domains.

Automatic purge of Cloudflare cache

Servebolt Optimizer supports the most complete solution for Cloudflare cache purging. The HTML Cache is automatically purged when any post type or term has been updated. You can also purge directly from the admin bar. This Cloudflare integration supports both the use of API key and API token authentication when communicating with the Cloudflare API.

HTML Caching

This plugin rewrites HTTP headers of HTML to allow for HTML Caching, and for the browser to cache HTML. HTML Caching may introduce all sorts of problems for end users, so installation and testing should be performed by a professional.

Configuration

This plugin can be controlled via the WordPress Dashboard or WP CLI. Additionally there are various filters and PHP constants at your disposal.

Filter and constant reference

The plugin has various filters and PHP constants that allows third-party developers to alter the behaviour of the plugin. Please read the article Filters and PHP constants in our help center to learn more.

Testing

We test against the current production version of WordPress and the next beta/development version

\n","installation":"

Navigate to your WordPress Dashboard > Plugins > Add New and then search for Servebolt and follow instructions.

Alternatively, you can also install Servebolt Optimizer via sFTP or WP CLI:

With sFTP:

Download this plugin and unzip
Upload servebolt-optimizer folder to the /wp-content/plugins/ directory
Activate the plugin through the ‘Plugins’ menu in WordPress
Navigate to Servebolt > Performance Optimizer and run optimizations if necessary

With WP-CLI:

Log in to your site with SSH
cd to your sites root wordpress folder
Run wp plugin install servebolt-optimizer --activate
Run optimizations wp servebolt db optimize

Run wp help servebolt to see all the available commands that can configure the plugin.

\n","faq":"\n

\nWill Servebolt Optimizer plugin make my site faster?\n\n

The Servebolt Optimizer plugin is primarily designed to make best use of our WordPress hosting or WooCommerce hosting. Its database optimizing feature does indeed help in making your database faster and thus your site.

\nCan I install this plugin if I’m not a Servebolt client?\n\n

Yes, you can. The database optimizations are beneficial for everyone as well as the Cloudflare cache purge options. You would miss out on the fastest WordPress hosting out there, but you can use it on a non-Servebolt site.

\nWhat if I discover a bug?\n\n

If you’re a Servebolt client, please reach out to our Support Team and we’ll be happy to help you out there. Alternatively, you can create a support forum request here.

\n\n","changelog":"

3.5.37

Changed password on SVN/WordPress.org, trying to authenticate again and deploy.

3.5.36

Bump release due to authentication issue during last release, failed uploading the tag to WordPress.

3.5.35

Confirmed WordPress 6.6.1 support.
Added Admin UI elements to manage Caching of 404’s, and fast 404’s reponses for static files
Implemented fast 404’s for static files, that give a reponse after either mu_plugins_loaded or plugins_loaded. No extra processing or file sizes.
Added purge all trigger to options->permalink_structure

3.5.34

fixed php sdk depreciation error
removed php 7.3 support, minimum level is 7.4, which is also minumum level Servebolt hosts.

3.5.33

Support for WordPress 6.5.2 confirmed.
Added auto healing for environment files where if the cached filepath is incorrect, it is automatically replaced.
Bugfix – On some cron based jobs that do not have HTTP_USER_AGENT set, were failing on newer versions of PHP. Added check for ‘HTTP_USER_AGENT’ before trying to use it in part of the prefetching checks.
Bugfix – Added additional checks on the strContains() helper function to deal with PHP8 requirements on null values.

3.5.32

Updated changelog with 3.5.31 reason for release.

3.5.31

release bump

3.5.30

When on Servebolt the plugin now checks the environement.json file to see if the key api_url exists. If its there it will use that, if not it will continue to use the pre-defined url for communication with the Servebolt API.

3.5.29

adapted cache tags prefix to be unique: Chosing between the shortest of bolt_id plus environment_id as one string, the domain name without dots as the other string.

3.5.28

Found extra typo and replaced ‘sb_optimizer_cach_tags_fine_grain_control’ to be ‘sb_optimizer_cache_tags_fine_grain_control’

3.5.27

fixed typo in ‘sb_optimizer_cach_tags_fine_grain_control’ to be ‘sb_optimizer_cache_tags_fine_grain_control’
added new brand icon
added copy text for Servebolt CDN

3.5.26

added filter ‘sb_optimizer_cach_tags_fine_grain_control’ that when set to false will use a single tag for all HTML and RSS
converted cachetags from a human readable format to a machine readable format to reduce header size
added new branding logo
forcing a cache purge all on update of this version of the plugin to move sites to the to new CacheTags schema

3.5.25

Allows for NextGen servers to be supported for reading Servebolt Environment files and obtaining the site id from the path.
Using hook set_object_terms, so that it checks if default_category is used on first save of a post, and if its is being replace with newer terms on first publish.
Tested upto 6.4.1
Fixed bug in cache by term id, now uses CacheTags whenever possible.
Added check for Image sizes on Accellerated Domains image resizer so that it can never have a zero value.

3.5.24

fixed small bug of missing save button on advanced tab of new installs
proven support for 6.3.1

3.5.23

Small text changes in WP Cron configuration area.
Adapted links to include a link to the advanced tab for enabling or disabling cron.
Cron enabled checkbox also takes account of the DISABLE_WP_CRON constant, not just the option.
proven support for WP 6.3

3.5.22

bump release

3.5.21

added cache-tag headers to search pages, so that they can optionally be cached. Acellerated Domains feature only.

3.5.20

fixed “PHP Deprecated” error when using PHP8.0+ and WP_DEBUG is set to TRUE.

3.5.19

updated supported WordPress version.

3.5.18

hid the ‘purge by taxonomy term’ menu and quick menu buttons for Servebolt CDN customers. This feature is not possible for them and should not have been showing.

3.5.17

bump release. no changes.

3.5.16

Added CacheTags to Servebolt CDN
Added HTML cache purging to Servebolt CDN

3.5.15

Bugfix for purge queue on large sites. It was giving CRON errors.
Added filter to allow for adaption of headers on Full Page Caching.

3.5.14

version bump to force release

3.5.13

Bugfix for Cloudflare direct purging via purge queue. it was not created purge records correctly.

3.5.12

Disabled WooCommerce cart url adaption when instantpage is not enabled.
Added check for [‘url’] in payload of queue creation object.

3.5.11

Added scheduled cleanup of expired transients.
Added method to stop WooCommerce carts from ever being prefetched by InstantPage.
Removed APO capability due to it being only possible now with the cloudflare plugin.
Added CacheTag headers to Accelerated Domains reducing purge commands to only 2 for each post/page update and their related archives, taxonomy terms and feeds.
Implemented CachTag purging for Accelerated Domains.
Added CacheTag headers to Servebolt CDN for later use in purging.
Added new garbage collection for the purge queue via cron scheduler.
Added UID column and UID index to the purge queue tables so that searching for existing queue items could be significantly speed up and also stop repeat adding of an existing
Added wp servebolt check-cdn-setup to the WP CLI to check the CDN setup for AcelerateDomains or ServeboltCDN.
Added wp servebolt cache purge queue trash to the WP CLI to purge old items from the queue
Changed Database Migrations to work with own version control, unlinking from the plugin version number.
Added LIMIT to garbage collection query.
Slight change to the logic for cache purging to improve payload checking.
Moved action_scheduler filters to only be implemented if action_scheduler is installed.
Fixed bug in WP Rocket compatibility.
Fixed a few typo’s.
Fixed PHP deprecated messages.
Added existence checking of API error messages.
Fixed cache headers errors on RSS feeds.

3.5.10

Added LIMIT to garbage collection query.
Increased batch capibilities action_scheduler, 8x more processing possible.

3.5.9

New Feature – Added Error Log link to admin menu bar
Lots of updated [https://wpplugin.dev.servebolt.com/](filters documentation)
Bug fix – added check for REQUEST_METHOD to see if it exists before using it, stopping cron errors

3.5.8

Adapted clearing of menu cache transients to include 404 page reference transients

3.5.7

bump release, previous verion did not correctly deploy to wordpress.org

3.5.6

Added the transformation of SRC’s for images implemented via blocks for Accelerated Domains/Servebolt CDN
Added unit tests for new functionality

3.5.5

Tested against WordPress 6.0
Added Andrew Killen as developer
Updated how Unit Tests work

3.5.4

Bugfix – Removed menu manifest file option from Prefetch-feature. Due to some difficulties with making the menu manifest file work in the Prefetch-feature it was decided to remove it until further notice. The script and style file manifest files will persist as before.
Bugfix – Resolved issue with the cache purge features in row actions for taxonomies/post types. The plugin adds purge cache-link in the row actions for posts and terms. We previously targeted all registered post types and taxonomies, but this is now changed to only target public post types and terms. The targeted post types and terms can also be controlled through filters (sb_optimizer_cache_purge_row_action_post_types, sb_optimizer_cache_purge_row_action_post_types_query, sb_optimizer_cache_purge_row_action_taxonomies, sb_optimizer_cache_purge_row_action_taxonomies_query).
Bugfix – Automatic cache purge of products during WooCommerce checkout. In some cases there was an error during the WooCommerce checkout. The feature in question purged cache for the product during checkout so that stock amount and status would be kept up to date. This error should now be resolved.
Bugfix – Automatic setup of WP Cron on multisite failed. The feature that sets the WP Cron up with the UNIX cron failed when ran on a multisite. This should now be fixed. The cause of the error was that the lockfiles we’re not generated with a valid filename. These lockfiles (originating from “flock”) keeps the system from running concurrent cron tasks, so that we force the system to wait until the previous job is done. Note that this is a Servebolt hosted only feature.
Bugfix – Error during plugin uninstallation. There was an error during plugin uninstallation due to a missing PHP constant. This is now fixed.
Bugfix – Errors when environment file is not present. There was some error related to the environment file not being found, either because there is a custom WordPress folder structure or because the file is removed (either by deletion on disk or by disabling the file in the control panel). The plugin now handles the absence of this file in a better way – the error handling was improved and there is an admin notice telling the user that the file is missing + instructions on how to fix this.

3.5.3

Fixed incompatibility issue with plugin Lightweight Sidebar Manager
Fixed issue with automatic cron setup (Servebolt-clients only) not working due to bug in the Servebolt API
Added migration to clean up legacy transients (orphaned transients without expiry)
Fixed bug in settings form for the Prefetch-feature
Fixed bug in feature access check for the Accelerated Domains Image Resize-feature
Fixed bug in database migration runner

3.5.2

Fixed issue with cache headers and authentication-check (user role determination)

3.5.1

Fixed issue with transient rows not expiring for the menu optimizer feature.

3.5

Added support for cache provider “Servebolt CDN”
Bugfix – WP Admin markup error. The styling for the information panel used in for example the cache settings page was broken in WordPress v5.9, but this is now fixed.
New feature – Clear site data on login. In v3.5 a new feature was added – every time a user logs in then we return a header telling the browser to clear local storage and browser cache. This is useful to ensure that cached content gets cleared for logged in users.
New feature – Support for Servebolt CDN. The plugin now supports Servebolt CDN.
Beta feature – Accelerated Domains Prefetching. We’ve added a new feature for users of Accelerated Domains – Prefetching of assets and menu items. This feature allows for our infrastructure to preliminary fetch the assets of a webpage and cache them in our infrastructure which results in reduction of load time. Another feature is that menu items gets prefetched as well, meaning that when you navigate to a subpage it has already been cached and is ready to be served in no time!
New feature – Cache purging when Accelerated Domains is disabled
\nWe have added a feature to purge all cache even when Accelerated Domains is disabled. This is useful when deactivating Accelerated Domains and doing a proper “cleaning up” by clearing all cache.
New feature – Automatic WP Cron setup (including Action Scheduler) (Servebolt-clients only). We have added a feature to automatically set up the WP Cron so that it runs using the UNIX cron. This offloads WordPress from having to trigger scheduled tasks as well as making the process of setting it up a lot easier. Note that this feature also sets up the Action Scheduler (used by WooCommerce and other plugins) to be run using the UNIX cron.
Bugfix – Accelerated Domains Image Resize can only be enabled when site has access
\nPreviously a Servebolt-client was able to enable Accelerated Domains Image Resizing even when the client did not have access to it (based on their subscription). We’ve not added a check so only eligible clients can enable the feature. Note that enabling the feature while not having access to it will result in the feature not being active. The subscription needs to be in place for the feature to work. This “bugfix” only fixes the GUI so that we communicate better to the client whether they have access or not.
Bugfix – Improved cache purge queue feature
\nWe’ve improved the cleanup of the cache purge queue to prevent the queu from growing too big. This is done by removing all completed queue items as well as removing failed queue items that are older than 1 month.
New feature – Purge all network feature
\nWe’ve now added a feature to purge all cache for all sites in a multisite-network. You can find it in the dropdown in the top bar in WP Admin.
Bugfix – WooCommerce product simple cache purge on checkout
\nWhenever a user checks out in WooCommerce then the cache for the products in the cart will be purged. Due to how we purge cache a whole range of URLs might be included in the cache purging. This is because a post/page/product might be visible on the front page, in archives etc. and thus we include the front page URL, archive URL in the cache purge actions. But in the context of WooCommerce checkout and WooCommerce product we decided that a simple cache purge will suffice – this meaning that we only purge cache for the product URL, not the front page URL or any other related URL.
Bugfix – WooCommerce product immediate cache purge on checkout. Whenever a user checks out in WooCommerce then the cache for the products in the cart will be purged. For many users this means using the queue to purge the cache of these products, but in the case of WooCommerce checkouts we now purge cache immediately regardless of whether they have the queue based cache purge active or not.
Bugfix in Menu optimizer – We saw that the menu optimizer feature was incompatible with some WordPress-themes. The feature was therefore refactored and should now be better suited to work with most WordPress-themes.

3.3

Bugfix – WP admin bar markup error – Fixed minor markup error in the WP admin bar dropdown menu. An obsolete “target”-attribute was added to the parent div element which is invalid.
Bugfix – menu cache feature issue with filters – Whenever a 3rd party adds a menu using the filter wp_nav_menu_args, we could not cache the result due to how we interact using WordPress filters. This should now be fixed.
Bugfix – menu cache feature producing excessive amount of transient rows – The menu cache feature produced too many transients due to the way the transient key (a.k.a. cache key) was generated. Solved by making the transient key less complicated and by adding a filter so that 3rd parties can modify the cache behaviour instead.
Cache purge queue origin metadata – Whenever an item is added to the cache purge queue, we now also add the origin of this event. For example a manual cache purge, or an automatic cache purge on content update etc.
Simplified cache purge – During cache purge we previously purged related URLs for a WP object (posts, terms etc.). Related URLs could be the front-page, archives etc. In some cases this caused large amounts of URLs to be purged cache for even when not needed. We have simplified cache purge in some cases – like for example during checkout in WooCommerce.
Improved cache purging for the menu cache feature – Whenever a menu is assigned to a menu location we now purge cache for the previously assigned menu. This process prevents orphaned transient rows and help prevent the options table from getting bloated.
Bugfix – Migration error on plugin activation/deactivation in CLI-context – Whenever the plugin was activated or deactivated there was, in some cases, an error due to the database migration not being ran correctly. This should now be solved.
Bugfix – Fixed broken Cloudflare API credentials validation in form – Whenever Cloudflare was selected as cache provider in the cache purge configuration form the validation did not function. This is now fixed.
Bugfix – Fixed unhandled exceptions – Due to missing namespace, some exceptions went unhandled which again caused fatal errors in some cases. Highly unfortunate! This is now fixed.
Bugfix – Could not determine if in Servebolt hosting environment from Cron-trigged CLI context – Due to absence of server variables, the system could not determine whether the code was executing in a Servebolt server environment when it was ran in CLI-context trigged by Cron. This is now fixed.
Changed name of menu cache feature – Due to confusion between Cloudflare/Accelerated Domains-cache and the menu cache feature we changed the name said feature to “Menu Optimizer”.

3.2

Improved automated cache purging – The automatic cache purge has been improved, primarily in 3 areas. Whenever a post/term gets deleted then the cache gets purged. Whenever an attachment gets updated (resized, cropped etc.) we purge cache for URLs, including all image sizes if the attachment is an image. Whenever a post gets excluded from the HTML Cache (formerly Full Page Cache) then we also purge cache.
Custom cache TTL per post type – One can now control the cache TTL (time-to-live) per post type. This allows for more fine-grained cache control.
More fine-grained access control to cache purge feature – Previously only administrators could purge cache. This is now changed using more fine-grained capability checks – administrators and editors can now purge cache, while authors can purge cache for their own posts. Contributors and subscribers cannot purge cache.
Better Jetpack compatibility – Previously the Jetpack Site Accelerator was in conflict with Servebolt’s Accelerated Domains. This is now fixed with Site Accelerator being disabled whenever Accelerated Domains or Accelerated Domains Image Resize-feature is active.
Menu cache performance feature – We’ve added a new performance enhancing feature – WordPress menu cache. This usually decreases TTFB with several milliseconds, even for menus with few items. The feature also includes automatic cache purge whenever a menu gets updated.
Translation loader performance feature – We’ve added a new performance enhancing feature – improved WordPress translations file loader. Whenever WordPress loads the translations from MO-files this causes a lot disk I/O. This feature will cache the MO-file using transients which in return decreases the loading time.

3.1.1

Added index to column “parent_id” in the queue table to improve query performance.

3.1

Accelerated Domains Image Resizing – This version introduces a new feature: Accelerated Domains Image Resizing. This feature will resize, optimize metadata, and cache your images on the fly. Improving load time and enhancing the user experience.
PHP version constraint – We have changed the required PHP version from 7 to 7.3. This means that whenever the plugin is activated in an environment running less than PHP version 7.3, the plugin will show an admin notice in WP Admin indicating the need to upgrade to be able to used the plugin.
Yoast SEO Premium – automatic cache purge for redirects. Whenever you add or remove a redirect in Yoast SEO Premium, the plugin will now purge the cache for the given URLs. This is useful since otherwise one would potentially need to manually purge these URLs after adding or removing a redirect.
Added CDN cache control header – We have now added a new header (CDN-Cache-Control) that allows for more fine grained control over the cache feature in the CDN-nodes.
Improved WP Rocket compatibility – We’ve improved the compatibility with WP Rocket’s cache feature so that it will not interfere with the cache feature of Servebolt Optimizer.

3.0.2

Fixed bug in compatibility code for older versions of WP Rocket
Fixed bug that caused post cache not to be purged when scheduling posts
Updated composer and NPM packages (affecting development environment only)

3.0.1

Corrected typo in string “Accelerated domains” to use uppercase in first character of each word.
Fixed issue in cache headers – the feature to exclude posts from cache was broken due to wrong order in conditions in the cache header logic. This is now fixed.
Removed priority-attribute from plugin static asset actions – due to cases of incompatibility between themes and other plugins we removed the priority-attribute from the actions that enqueued the plugins static assets. This means that the priority-attribute falls back to the default value of 10 which should be less likely to cause issue.
Resolved issue with single file composer packages not being included in autoloader – certain packages were not included in the Composer autoloader due to an issue in Mozart (which was needed to resolve conflicts between composer packages used in WordPress plugins). The packages originated as dependencies of the Servebolt PHP SDK, and was solved by specifically including them in the plugins composer-file. The affected packages contained polyfills for the PHP functions “http_build_url” (from module pecl_http) and “getallheaders” which means that this was only an issue in environment where these functions were not available in PHP.
Removed SASS-parser since there was no real need in the project – due to an issue with the npm package “node-sass” running on macOS Big Sur the SASS-parser was disabled, at least for now.

3.0.0

Version 3.0.0 is a major rewrite of Servebolt Optimizer and we highly recommend you testing this update on staging before you update in on production.

Rewritten codebase – The whole plugin code base is rewritten. This was done since the previous structure did not allow for automated testing (using PHP Unit) nor was it up to par with modern PHP. To achieve this the code base was rewritten to use PSR-4 autoloading as well as making the existing code testable. The code standard was also changed to PSR-1. The new required PHP version is 7.3 or higher.
PHP Unit tests – PHP Unit tests have been added as an attempt to prevent errors, speed up the development process, and ensure better overall code quality.
Accelerated Domains by Servebolt – The plugin has support for activating Accelerated Domains by Servebolt. The addition of this feature affects the cache purge system which previously only worked with Cloudflare, but now also supports Accelerated Domains and its cache feature. This can be controlled by selecting the cache provider in the cache purge settings.
CLI-commands – JSON-support – The CLI-commands now has an optional JSON return format. This can be done by adding “–format=json” to the command call. Note that the HTML Cache-related commands do not have this support yet, but all other commands has.
CLI-commands – Cloudflare CLI commands removed – Since the cache purge feature now works with both Cloudflare and Accelerated Domains then the feature is no longer only specific to Cloudflare. This lead to most of the Cloudflare-related commands being migrated to the “wp servebolt cache settings“-namespace. The only remaining Cloudflare-related CLI command is “wp servebolt cf setup“ which works like before, but now also has JSON return format supported as mentioned earlier.
Improved cache purging – The cache purge feature is improved and expanded. See below.
Cache purging of old URLs – Whenever a post/term URL is changed then the system will purge the old URL. This is useful since otherwise you would possibly get conflicting URLs and/or duplicated content.
WooCommerce compatibility – The cache will now be purged for a WooCommerce product whenever the stock amount/status changes, like during a checkout. This is necessary to keep the stock up to date for the visitors/customers, especially on high traffic sites. Cache purging will now also purge all URLs of a variable WooCommerce product.
Improved exception handling – Whenever there is an error during a cache purge request the system now has an improved handling of exceptions being thrown.
WP Rocket compatibility – WP Rocket’s cache feature was previously in conflict with Servebolts own cache feature. This should now be solved since WP Rocket’s cache feature is disabled as long as the HTML Cache-feature is active in Servebolt Optimizer. This allow users to still use the other features of WP Rocket without conflicts.
Improved queue handling when purging cache – In the cache purge feature there is an option to use a queue that will send the list URLs (that should be cached) in delayed chunks instead of sending them all immediately. These requests would typically originate from a post update, or whenever someone does a WooCommerce checkout and the product stock changes. This update improves the handling where the amount of URLs previously would have exceeded the allowed amount according to Cloudflare.
Third party cache purge functions – Third party developers can now call publicly available cache purge functions. This allows for purging by post, term, URL or purge all.
Single site plugin activation constraint – The plugin can now only be activated site-wide when used in a multisite network.
Cloudflare Image Resizing removed from the GUI – The beta-feature “Cloudflare Image Resizing” has now been removed due to it not being tested properly. It is still available through the CLI, but not in the GUI.
Removed network cache purge action – The feature to purge all cache for all sites in a multisite-network was removed due to lack of time to integrate this with Accelerated Domains and the improved queue system.
Removed the cache purge queue GUI – The queue GUI (list) in the cache purge settings was removed due to lack of time to integrate this with Accelerated Domains and the improved queue system.
Cache purge links in post/term list – It is now possible to trigger cache purge actions from the row actions of posts and terms in WP Admin.
Added purge actions for terms in the WordPress Admin bar – When viewing a term – either in WP Admin or front-end – you can now purge the cache via the Admin bar.
Added custom HTTP User Agent string to API requests – The outgoing requests from the plugin now uses a custom user agent string that will allow for easier identification of requests originating from the plugin.
Log viewer GUI update – The log viewer GUI has gotten overhauled with better styling.
Fixed bug – The form containing the cache purge configuration had autocompletion on. This lead to problems with information wrongfully being submitted. This is now fixed.
Fixed bug – Host determination function failed when in CLI context. The function “isHostedAtServebolt“ returned false regardless of hosting environment when running in CLI-context. This is fixed in this version.
Fixed bug – Cache headers absent in archives. When using HTML caching and setting the post type to “all” then the archives got not cache headers. This version fixes that.

2.1.5

Hotfix in Cloudflare cache purge feature

2.1.4

Added basic Cloudflare APO-support
Changed order of URLs when purging cache for a post in Cloudflare
Fixed bug in HTML Cache-logic for archives
Fixed bug in Cloudflare Image Resize

2.1.3

Fixed styling issue in Gutenberg-editor sidebar menu

2.1.2

Fixed styling issue in Gutenberg-editor sidebar menu

2.1.2

Fixed JavaScript error related to the Gutenberg-editor

2.1.1

Fixed issue with script inclusion causing errors
Added missing CLI argument for FPC deactivation

2.1

Added extended cache invalidation for Cloudflare cache – archives and other related URLs will also be purged.
Added a SweetAlert-fallback so that native JavaScript alerts, prompts, confirmations will be used instead. This is due to SweetAlert being prone to conflicts with themes and other plugins.
Made the Cloudflare Image Resize-feature available (through WP CLI and PHP constant).
Completed the WP CLI with more configuration commands.
Added more meta-data to the cache purge queue when using the Cloudflare cache purge feature + added a cleaner that will remove old elements if not automatically purged.
Added full overview over available PHP constants and filters.
Various bug fixes
Various GUI improvements
Bug fix for WooCommerce-implementations (corrected cache headers for WooCommerce-pages).

2.0.9

Hotfix related to the admin bar

2.0.8

Improved GUI – now possible to purge cache (via the admin bar menu) for single pages when viewing / editing
Fixed minor CF settings page validation bug

2.0.7

Bugfix in comment cache purge

2.0.6

Improved feedback when purging cache
Code cleanup and refactor
Various bugfixes
Added automatic cache purge on comment post/approval

2.0.5

Swapped Guzzle with WP HTTP API to prevent namespace conflicts with other plugins also using Guzzle.

2.0.4

Bugfix in function that checks whether current site is hosted at Servebolt.

2.0.3

Various bugfixes and improvements to WP CLI-commands

2.0.2

Various bugfixes

2.0.1

Various bugfixes

2.0

Added Automatic Cloudflare cache purge feature
Major code refactor

1.6.4

Minor bugfix

1.6.3

Minor bugfix

1.6.2

Minor bugfix

1.6.1

Removed security from dashboard

1.6

New: Control HTML Cache settings with WP CLI (wp servebolt fpc)
Improvement: Turn off vulnerable plugins check with define('SERVEBOLT_VULN_ACTIVATE', false);
Removed: Scanning of plugins for security vulnerabilities. This will be released in a separate plugin.
Removed: Transient cleaner
Added a exit if installed on PHP versions lower than 7

1.5.1

Bugfix: Unable to add indexes on non-multisite installs

1.5

Added multisite support
Fixed a bug in the wpvulndb security checker
Added a nice animation when optimizer runs
Updated readme.txt

1.4.2

Important bugfix

1.4.1

Important bugfix

1.4

Github #8 Added a transients cleaner to wp-cron
Added transients cleaner to WP-CLI
Changes to WP CLI commands
NEW: Added a view to see vulnerabilities in …

\n"},"short_description":"This plugin implements Servebolt's WordPress best practices, and connects your site to the Servebolt Control Panel.","download_link":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.37.zip","screenshots":[],"tags":{"cache":"cache","cloudflare":"cloudflare","log":"log","optimization":"optimization","performance":"performance"},"versions":{"1.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.2.zip","1.2.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.2.1.zip","1.2.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.2.2.zip","1.2.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.2.3.zip","1.3.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.3.1.zip","1.3.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.3.2.zip","1.3.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.3.3.zip","1.3.4":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.3.4.zip","1.4":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.4.zip","1.4.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.4.1.zip","1.4.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.4.2.zip","1.4.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.4.3.zip","1.5":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.5.zip","1.5.0":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.5.0.zip","1.5.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.5.1.zip","1.6":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.6.zip","1.6.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.6.1.zip","1.6.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.6.2.zip","1.6.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.6.3.zip","1.6.4":"https://downloads.wordpress.org/plugin/servebolt-optimizer.1.6.4.zip","2.0":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.zip","2.0.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.1.zip","2.0.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.2.zip","2.0.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.3.zip","2.0.4":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.4.zip","2.0.5":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.5.zip","2.0.6":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.6.zip","2.0.7":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.7.zip","2.0.8":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.8.zip","2.0.9":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.0.9.zip","2.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.1.zip","2.1.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.1.1.zip","2.1.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.1.2.zip","2.1.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.1.3.zip","2.1.4":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.1.4.zip","2.1.5":"https://downloads.wordpress.org/plugin/servebolt-optimizer.2.1.5.zip","3.0.0":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.0.0.zip","3.0.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.0.1.zip","3.0.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.0.2.zip","3.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.1.zip","3.1.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.1.1.zip","3.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.2.zip","3.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.3.zip","3.5":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.zip","3.5.1":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.1.zip","3.5.10":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.10.zip","3.5.11":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.11.zip","3.5.12":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.12.zip","3.5.13":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.13.zip","3.5.14":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.14.zip","3.5.15":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.15.zip","3.5.16":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.16.zip","3.5.17":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.17.zip","3.5.18":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.18.zip","3.5.19":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.19.zip","3.5.2":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.2.zip","3.5.20":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.20.zip","3.5.21":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.21.zip","3.5.22":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.22.zip","3.5.23":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.23.zip","3.5.25":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.25.zip","3.5.26":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.26.zip","3.5.27":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.27.zip","3.5.28":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.28.zip","3.5.29":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.29.zip","3.5.3":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.3.zip","3.5.30":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.30.zip","3.5.31":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.31.zip","3.5.32":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.32.zip","3.5.33":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.33.zip","3.5.34":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.34.zip","3.5.37":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.37.zip","3.5.4":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.4.zip","3.5.5":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.5.zip","3.5.6":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.6.zip","3.5.7":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.7.zip","3.5.8":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.8.zip","3.5.9":"https://downloads.wordpress.org/plugin/servebolt-optimizer.3.5.9.zip","5.3.24":"https://downloads.wordpress.org/plugin/servebolt-optimizer.5.3.24.zip","trunk":"https://downloads.wordpress.org/plugin/servebolt-optimizer.zip"},"donate_link":"https://servebolt.com","icons":{"1x":"https://ps.w.org/servebolt-optimizer/assets/icon-128x128.png?rev=2255599","2x":"https://ps.w.org/servebolt-optimizer/assets/icon-256x256.png?rev=2255599"}},{"name":"Plugin Security Scanner","slug":"plugin-security-scanner","version":"2.0.2","author":"Glen Scott","author_profile":"https://profiles.wordpress.org/glen_scott/","requires":false,"tested":"5.2.21","requires_php":false,"requires_plugins":[],"rating":98,"ratings":{"1":0,"2":0,"3":0,"4":1,"5":6},"num_ratings":7,"support_threads":0,"support_threads_resolved":0,"downloaded":67720,"last_updated":"2019-08-19 7:08pm GMT","added":"2015-04-13","homepage":"https://yellowsquare.com/plugin-security-scanner/","sections":{"description":"

This plugin determines whether any of your plugins or themes have security vulnerabilities. It does this by looking up details in the WPScan Vulnerability Database.

It will run a scan once a day, and e-mail the administrator if any vulnerable plugins or themes are found.

Please note: As from version 2.0.0, you will need to register on the WPScan Vulnerability Database site in order to get an API token. This token is required before any security scans can be performed. Once you have your token, it can be added to the Plugin Security Scanner settings page.

You can also register a webhook for notifications. The webhook will trigger daily, even if no vulnerabilities found. The webhook is a post request, with JSON payload containing the vulnerabilities.

You can enable the webhook under Settings\\General tab – see the Plugin Security Scanner settings.

It also adds a new menu option to the admin tools menu called “Plugin Security Scanner”. Clicking this runs a scan. If the scan finds any problems, it shows you a list of plugins or themes that have vulnerabilities, along with a description of the issue.

The WPScan Vulnerability Database API, which this plugin uses, is free for non-commercial use. However, any commercial usage will require that you purchase a commercial license from WPScan. If you are using the API for your own site then you will not need a commercial license. However, if you are a hosting company and install the plugin systematically across all of your clients sites, then you will need to purchase a commercial license. If you are making heavy use of the API, it is likely that you will need to purchase a commercial license. To enquire about a commercial license, please contact team@wpvulndb.com

Icons made by Alessio Atzeni from www.flaticon.com is licensed by CC BY 3.0

\n","changelog":"

2.0.2

Clarified 403 error

2.0.1

Clarified error message in daily email

2.0.0

Use WPScan Vulnerability Database API V3
Important notice: to use this plugin, you now need to register a user and get an API token from https://wpvulndb.com/users/sign_up
Improved error handling

1.6.0

Moved settings to dedicated page
Added option to ignore unpatched issues

1.5.2

Fix: Allow scanning if you are running WordPress nightly or release candidates

1.5.1

Added option to ignore ‘WordPress 2.3-4.8.3 – Host Header Injection in Password Reset’ vulnerability

1.5.0

Checks vulnerabilities in WordPress core files
Added ability to send an HTTP request when vulnerabilities are found (webhook)

1.4.1

Fix issue with theme version checking

1.4

Themes as well as plugins are now scanned for vulnerabilities

1.3.1

Added check to make sure the WPVulnDb API has returned a valid response

1.3

Added option under “Settings / General / Plugin Security Scanner” to disable the email notification

1.2.1

Moved to WPScan Vulnerability Database API v2

1.2.0

Added i18n support

1.1.9

Fix: Removed unecessary ob_flush calls
Fix: If vulnerability does not have a “fixed in” version number, report it as a vulnerability

1.1.8

Fix: corrected links to WPScan Vulnerability Database

1.1.7

Add link to WPScan Vulnerability Database details page

1.1.6

Conditionally include plugin.php include in case it is not already included

1.1.5

Escape output in HTML report to prevent XSS

1.1.4

Added blog title to email subject

1.1.3

Fixed bug that prevented admin email being sent

1.1

Email admin daily if any vulnerabilities are found

1.0

Initial release

\n","screenshots":"

$\"Example$
Example run of the security scanner that has found two vulnerable plugins.
$\"E-mail$
E-mail alert to administrator when vulnerable plugins have been found.

"},"short_description":"This plugin alerts you if any of your plugins have security vulnerabilities. It does this by utilising the WPScan Vulnerability Database once a day.","download_link":"https://downloads.wordpress.org/plugin/plugin-security-scanner.2.0.2.zip","screenshots":{"1":{"src":"https://ps.w.org/plugin-security-scanner/assets/screenshot-1.png?rev=1133754","caption":"Example run of the security scanner that has found two vulnerable plugins."},"2":{"src":"https://ps.w.org/plugin-security-scanner/assets/screenshot-2.png?rev=1155400","caption":"E-mail alert to administrator when vulnerable plugins have been found."}},"tags":{"plugins":"plugins","scanner":"scanner","secure":"secure","security":"security","vulnerabilities":"vulnerabilities"},"versions":{"1.0":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.0.zip","1.0.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.0.1.zip","1.0.2":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.0.2.zip","1.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.zip","1.1.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.1.zip","1.1.2":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.2.zip","1.1.3":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.3.zip","1.1.4":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.4.zip","1.1.5":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.5.zip","1.1.6":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.6.zip","1.1.7":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.7.zip","1.1.8":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.8.zip","1.1.9":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.1.9.zip","1.2.0":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.2.0.zip","1.2.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.2.1.zip","1.3":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.3.zip","1.3.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.3.1.zip","1.4":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.4.zip","1.4.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.4.1.zip","1.5":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.5.zip","1.5.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.5.1.zip","1.5.2":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.5.2.zip","1.6.0":"https://downloads.wordpress.org/plugin/plugin-security-scanner.1.6.0.zip","2.0.0":"https://downloads.wordpress.org/plugin/plugin-security-scanner.2.0.0.zip","2.0.1":"https://downloads.wordpress.org/plugin/plugin-security-scanner.2.0.1.zip","2.0.2":"https://downloads.wordpress.org/plugin/plugin-security-scanner.2.0.2.zip","trunk":"https://downloads.wordpress.org/plugin/plugin-security-scanner.zip"},"donate_link":"","icons":{"1x":"https://ps.w.org/plugin-security-scanner/assets/icon-128x128.png?rev=1133757","2x":"https://ps.w.org/plugin-security-scanner/assets/icon-256x256.png?rev=1133757"}}]

How many API requests do you need?

Security Checks

What does the plugin do?

Further Reading

1.16

1.15.7

1.15.6

1.15.5

1.15.4

1.15.3

1.15.2

1.15.1

1.15

1.14.4

1.14.3

1.14.2

1.14.1

1.14

1.13.2

1.13.1

1.13

1.12.3

1.12.2

1.12.1

1.12

1.11

1.10

1.9

1.8

1.7

1.6

1.5

1.4

1.3

1.2

1.1

1.0

Features

Accelerated Domains

Automatic purge of Cloudflare cache

HTML Caching

Configuration

Filter and constant reference

Testing

3.5.37

3.5.36

3.5.35

3.5.34

3.5.33

3.5.32

3.5.31

3.5.30

3.5.29

3.5.28

3.5.27

3.5.26

3.5.25

3.5.24

3.5.23

3.5.22

3.5.21

3.5.20

3.5.19

3.5.18

3.5.17

3.5.16

3.5.15

3.5.14

3.5.13

3.5.12

3.5.11

3.5.10

3.5.9

3.5.8

3.5.7

3.5.6

3.5.5

3.5.4

3.5.3

3.5.2

wpvulndb

WPScan – WordPress Security Scanner

Servebolt Optimizer

Plugin Security Scanner

Get New Themes & Resources