PluginPeek: Theme & Plugin Detector for WordPress

See the theme, plugins and versions of any WordPress site, and whether they have known vulnerabilities.

What WordPress theme is this site using, and which plugins? Click PluginPeek on any website to find out in one second. PluginPeek is a WordPress theme detector and WordPress plugin detector in one. It reads only what the page you are viewing already loaded, then shows: • The theme, including child theme and parent theme, with versions • Every plugin it can see, with its version (from asset versions, generator tags and readme files) • The WordPress version, where the site exposes it • How many plugins have known vulnerabilities, matched against the Wordfence Intelligence database FREE, FOREVER Theme, plugins, versions and a count of known vulnerabilities on any site you visit. No account needed. PRO: $9/month or $49 lifetime (launch price, first 100 buyers) • Full vulnerability details for each plugin: severity (CVSS), CVE, affected versions, the version that fixes it, and a link to the public advisory • Watch list for up to 25 sites: we recheck them daily from the outside and email you when one gains a known vulnerability. No plugin to install on the sites and no logins to share. • Shareable client report: a clean, private, printable page with your agency name, for client check-ins and proposals WHO IT IS FOR • Freelancers and agencies checking a prospect's or client's site before a call • Designers who want to know "what WordPress theme is that?" • Site owners who want a free outside-in WordPress vulnerability check • Developers who need a quick WordPress plugin checker and version checker PRIVACY PluginPeek runs only when you click it. Detection happens in your browser. Free use sends only the list of detected plugin and theme names and versions to our server to count known vulnerabilities. It does not send the page address, page content, cookies or browsing history. We do not sell data or show ads. Full policy: https://pluginpeek.com/privacy RESPONSIBLE USE PluginPeek shows public advisory information only (no exploit details). Use it on sites you own, manage, or are evaluating with permission. Malicious use is prohibited by our terms. Vulnerability data provided by Wordfence Intelligence. WordPress is a trademark of the WordPress Foundation. PluginPeek is not affiliated with or endorsed by the WordPress Foundation, Automattic or Defiant (Wordfence).