MainWP Vulnerability Checker Extension
Antivirus scan
Powered by ClamAV
✅ Verified clean
This product file has passed our security filters.
Want to run a fresh ClamAV scan right now? Takes a few seconds and shows scanner version, signature DB and live result.
This can take 5 to 30 seconds.
Clean file Threat detected
No threats detected in this file.
- File
- Size
- Scanned
- ClamAV
- Signature database
⚡ Powered by ClamAV
Scan could not be completed
Report product
If you detected an issue (broken file, malware, inappropriate content, etc.) let us know and we'll review it ASAP.
Sign in to report
About MainWP Vulnerability Checker Extension
When the vulnerable plugin sits on the site nobody opens
Maintaining twenty client sites means that, sooner or later, one of them runs a plugin with a known security flaw and nobody has noticed. It is rarely the site you check every week, but the one that has gone months untouched. And the client only finds out when something breaks. MainWP Vulnerability Checker Extension lets you find out first: it matches the plugins and themes installed on your Child Sites against a vulnerability database and shows everything in the MainWP Dashboard.
What MainWP Vulnerability Checker reviews on your Child Sites
- Vulnerable plugins and themes across all connected sites, on a single screen, without logging into each site.
- Two data sources to choose from: the free MainWP NVD API (based on the database of NIST, the US standards institute) or the paid API of the WPScan vulnerability database.
- An «Ignore» function to dismiss false positives so they do not show up again in later scans.
Everything is managed from the Dashboard you already use for the rest of your portfolio, so the security check does not force you to open yet another tool.
NVD or WPScan: the choice depends on your portfolio
If you are starting with a few sites
The MainWP NVD API is free and gives you a first layer of control at no extra cost. Expect an occasional false positive, and that is what the «Ignore» button is for.
If you manage many client sites
When every false alert costs review time multiplied across dozens of sites, WPScan is worth considering: its database is updated by WordPress security specialists and aims for more accurate results.
If you sell maintenance to your clients
You decide what to do with each alert: this plugin only tells you what is vulnerable and why.
Frequently asked questions
Do I need anything besides the extension?
Yes: one of the two APIs, either the free MainWP NVD or the paid WPScan one. Without one of them there is no data to compare against.
Can I see several sites at once?
Yes, every Child Site connected to your MainWP Dashboard is checked from the same panel.
How often is the information updated?
Both the MainWP NVD API and the WPScan API provide up-to-date data on vulnerable plugins and themes.
What do I do if it flags something that is not real?
Use «Ignore» on that result and it will stop appearing in later scans.
It only works inside MainWP and with a connected API
It is not a standalone plugin you install on any WordPress site: it is an extension of the MainWP Dashboard and works on the sites you have connected as Child Sites. Nor is it a firewall or a malware scanner: it detects known vulnerabilities in plugins and themes, it does not clean sites that are already infected. With the free API, expect to review the odd false positive by hand.
Topics
Version history
-
v
5.0.2 Current 8 Jan 2025
Customer reviews
Sign in to leave a review. Only people who have the product can review it.
No reviews for this product yet.
Frequently asked questions
-
GPL (General Public License) is the license under which WordPress and most premium plugins/themes are distributed. It grants you the right to use, modify and redistribute the software in as many projects as you want, with no domain restrictions.
-
Yes. With membership you get automatic updates via our GPLClub Updater plugin (installed on your WP, detects new versions and applies them). With individual purchase, you get one year of manual updates from your account.
-
Depends on the plan. Monthly: 3 domains. Semi-annual: 7. Annual and Lifetime: 15. Individual purchase: 1 domain.
-
GPLClub offers its own support for installation, configuration and compatibility. For direct support from the original author (feature requests, product-specific bugs), a license purchased from the author is required.