WordPress security and vulnerability scanner

Connect the site to CMDPress and run its vulnerability scan. CMDPress checks the core, plugin and theme versions a site runs against known vulnerabilities and shows which sites are affected. Findings can be sorted by severity and site, and each one says what to do next, such as the update to apply or the setting to change.

Compare each installed plugin version with a list of known vulnerabilities, then update any plugin that has a patched version. CMDPress does that comparison for every connected site and flags each site running an affected version, so one vulnerable plugin shows up everywhere it is installed. Take a backup before the update, then run the scan again to confirm.

Yes, for your first site. CMDPress keeps one connected site free forever with no credit card, so you can run vulnerability scans, risky settings checks and malware indicator checks on a real site before you pay for a second. Each additional site is $2.99 per month, with the security scanner included and no add-on fee.

Yes. The CMDPress security scanner lists vulnerability findings and security status across every connected site, so you can sort by severity and site and fix the riskiest issues first. Each issue connects to alerts and recent activity for context, and the dashboard filters sites as healthy, warning or offline.

Yes, it reports malware indicators alongside vulnerable versions and risky settings, so suspicious signs show up in the same findings. Treat an indicator as a reason to investigate: check the site’s recent activity and logs, compare files against a clean backup, and restore if needed. CMDPress creates and restores backups per site, including to your own Amazon S3.