Skip to content
SymbolicLabs
Contact
SymbolicLabs WP Check

Check any WordPress site, just the URL

Is your WordPress site up to date and secure? In under a minute, the check shows which version runs, which plugins are outdated and whether known vulnerabilities are open.

Step 1 of 3: Address

How secure is your WordPress site?

The free check takes less than a minute and looks at version, plugins, known vulnerabilities, public attack surface and security headers. From the outside, without any login.

Only check websites you own or manage.

  • No install, no plugin on your site
  • Publicly visible data only
  • Result without sign-up or email

What it checks

  • Updates: WordPress itself, detected plugins and the PHP version, compared with current releases. Plugins that are no longer maintained or were removed from wordpress.org are flagged.
  • Known vulnerabilities: how many publicly known vulnerabilities affect the detected versions, and how severe they are.
  • Exposed information: visible version numbers, readme and debug log files, public usernames, open registration, browsable upload folders, XML-RPC and an unprotected login page.
  • Encryption and browser protections: HTTPS, redirects from HTTP and security headers.
  • Performance: server response time and the number of scripts and stylesheets on the home page.
  • Search and AI visibility: title, meta description, headings, canonical tag, robots.txt, sitemap, noindex and llms.txt.
  • Privacy signals: fonts loaded from Google servers and embedded third-party services.

The result is a score from 0 to 100 with a rating, each finding with an explanation and a next step, and what the site already does well.

How it works

The check reads only what any visitor’s browser can see: the home page and a few well-known paths, at most 16 requests. It never logs in, submits forms or tries to exploit anything. Vulnerabilities are shown as count and severity only, never with details that would help an attacker.

An outside view is a lower bound, not a full security audit. Plugins without traces on the home page stay hidden, and so does everything behind the login.

Who is behind it

SymbolicLabs is a software agency from Hamburg, Germany, focused on CMS and web development. We run the check ourselves. Only check websites you own or are responsible for; see our terms of use, privacy policy and support.