Audit any WordPress Plugin in Seconds
Upload a plugin ZIP or search by WordPress.org plugin name or slug to run an instant audit across security, standards, performance, compatibility, accessibility, privacy, and WordPress.org readiness.
Upload Plugin ZIP
Upload a plugin ZIP file from your device (max 10MB)
Search WordPress.org
Search any plugin from WordPress.org and scan instantly
Not seeing your version?
You're protected with Plugin Auditor
Scan plugins before you install. Stay secure, stay ahead.
As seen on
Sign up to keep your work
Everything you scan as a guest disappears when you leave. A free account saves your reports, lets you scan more, and unlocks the extras agencies actually need. Still free, just sign up.
Scan history
Every report saved to your account, ready to revisit.
Rescan a plugin
Re-run scans across plugin versions to track changes.
PDF export
Polished reports to share with clients or include in handoffs.
Larger uploads
Scan ZIPs up to 30 MB, up from 10 MB.
More scans daily
30 scans per day, up from 3.
Same privacy
Your code is still deleted the moment each scan finishes.
No card. Takes 30 seconds.
What the scan covers
125 checks across 6 categories. Every flagged issue includes the file name and line number.
Security
SQL injection, XSS, nonces, capability checks, hardcoded secrets, code obfuscation.
Standards
Plugin headers, GPL license, function prefixing, i18n, script enqueuing, readme.
Performance
Unbounded queries, query-in-loop, transient usage, remote request caching, eager loading.
Compatibility
Hardcoded URLs, options autoload, PHP version compatibility, multisite support.
Privacy
Privacy policy hook integration and GDPR-aware data handling practices.
Accessibility
Alt text, form labels, ARIA attributes, keyboard access, heading structure, link text.
Built on standards you already trust
Our checks are informed by Plugin Check, WPCS, PHPCS, OWASP, WCAG 2.1, and the WordPress.org plugin guidelines.
Loading scan report…
This scan couldn't be completed
Something went wrong while analyzing this plugin.
Scan another plugin
Plugin report
Scanned v Closed on WP.orgThe verdict
Plain-language answers — the selling point for non-developers. No jargon.
Compatibility & requirements
- Requires PHP —
- Requires WordPress —
- Tested up to —
- Version adoption — run the current version
Audit scores by category
Detailed Results
Code footprint
ZIP file size
–
Total files
–
across all file types
Lines of PHP
–
File types
–
distinct formats
File types
Maintenance & history
Last updated
—
Release cadence
—
average between releases
Total releases
—
Version distribution
– of installs run an older version
How scores changed across versions
How issues changed across versions
Findings by severity per audited version — see which issues were fixed over time.
Contributors & developers
What this plugin does to the site
Everything it adds, stores, loads and connects to on your site — with the technical detail one click away.
Save this report to your profile
Create a free account to save your scan history, track plugins across versions, and scan without daily limits.
Already have an account? Sign in