WP PlugIndex
WordPress plugin intelligence profile

Pura Vida Vulnerability Scanner

Scan your plugins, themes and WordPress core against trusted vulnerability databases and get a clear, prioritized security overview.

DownloadFind alternativesHow plugin alerts work
WP PlugIndex snapshot

Current directory snapshot

Tested up to WordPress 7.0
Current version1.1.0
WordPress coverageTested up to WordPress 7.0
Minimum stackWP 5.6 · PHP 7.2
Directory statusactive
Last directory update16 Jun 20264mo ago
Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org

Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →

WP PlugIndex currently records Pura Vida Vulnerability Scanner version 1.1.0 as active, updated 4mo ago and tested up to WordPress 7.0.

Overview

About this plugin

Pura Vida Vulnerability Scanner checks everything installed on your site, including plugins, themes and WordPress core, against the Wordfence Intelligence vulnerability database, audits your site’s security posture, and shows you exactly what is at risk and how to fix it.

It does not invent findings. org update channel) and live checks of your own server.

Security overview

The dashboard opens with an at-a-glance status table covering:

  • WordPress Version: OK / Warning
  • Vulnerable Plugins: OK / Critical / High / Medium
  • Missing Headers: Present / Missing / N/A (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy)
  • SSL: Valid / Expiring soon / Expired / N/A (certificate expiry)
  • DNS: OK / Issues / N/A
  • Email Security: SPF and DMARC (DKIM is selector-specific)
  • CDN/WAF: Detected / Not detected / N/A

What it does

  • Inventories every installed plugin, theme and the WordPress core version.
  • Matches each item and version against a continuously updated vulnerability feed.
  • Shows severity (CVSS), the CVE identifier, a description and the recommended fix for every finding.
  • Audits your configuration and lists prioritized hardening recommendations (2FA, updates, HTTPS, file editor, and more).
  • Optional scheduled scans with email alerts when new critical/high issues appear.

Data sources

  • Wordfence Intelligence Vulnerability Data Feed: free for personal and commercial use; includes CVE (MITRE) and CVSS information.
  • CVE (MITRE Corporation): the canonical vulnerability identifiers.
  • WordPress.org update channel: available core, plugin and theme updates.
  • Live site checks performed by the plugin: HTTP headers, SSL, DNS, SPF/DMARC and CDN/WAF.

This product includes data that may be copyrighted by Defiant Inc. (Wordfence Intelligence) and by the MITRE Corporation (CVE®); their notices are displayed alongside the relevant findings.

com/).

External services

This plugin connects to one external service to function: the Wordfence Intelligence Vulnerability Data Feed.

)

This plugin downloads the public WordPress vulnerability database from Wordfence in order to match it against the plugins, themes and core version installed on your site.

  • What is sent: your Wordfence Intelligence API key (in the request Authorization header) and your site’s URL (in the request User-Agent header), sent to https://www.wordfence.com/. The list of plugins and themes installed on your site is NOT transmitted; matching is performed locally on your own server.
  • When it is sent: when you run a manual scan, and when a scheduled scan runs (about once per day). The downloaded database is cached locally for 24 hours so the service is contacted at most about once per day.
  • Service terms: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
  • Privacy policy: https://www.wordfence.com/privacy-policy/

The plugin also performs read-only checks against your own site for the Security Overview: a loopback HTTP request to your own home URL (to inspect response headers and detect a CDN/WAF) and DNS lookups for your own domain (to check DNS resolution and SPF/DMARC records). These query your own domain and public DNS only; no data is sent to any third party.

WordPress.org metadata

Plugin tags

Topics listed for this plugin in the WordPress.org directory.

  • hardening
  • malware
  • scanner
  • security
  • vulnerability
Compatibility & maintenance

Compatibility & maintenance

Tested up to WordPress 7.0

Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 7.0.

Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.0
Minimum requirementsWordPress 5.6 · PHP 7.2
Update activity16 Jun 20264mo ago

“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.

Changes recorded by WP PlugIndex

Recent tracked changes

No tracked version or compatibility changes have been recorded by WP PlugIndex yet.

Tracking & source

WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.

How WP PlugIndex worksFind alternatives
Plugin watchlist

Watch this plugin

Sign in to your WP PlugIndex account or create a free account. Free accounts can watch up to 5 plugins and see what changed.

Sign inCreate free account
Watch limit

Watchlist limit reached

You have reached your current active watch limit.

Upgrade to Alerts