Security scores
inside your admin.
See CVE data, risk ratings, and unpatched vulnerability warnings for every installed plugin — without leaving WordPress.
Every row tells
you the risk.
Your entire plugin list gets color-coded by security score. Red rows with unpatched CVEs jump out immediately. Green rows give you confidence. No clicking, no searching — the risk is right there.
Check the score
before you install.
Browsing for new plugins? WP-Safety injects security badges into every plugin card on the Add Plugins page. You'll see the score, CVE count, and unpatched warnings before you ever hit "Install Now."
See the security score on every plugin card before you install it.
Red badges highlight plugins with unpatched vulnerabilities.
One click to the full WP-Safety.org security report for any plugin.
admin@example.comexample.comwps_a3f8c1e9...Only plugin slugs, versions, admin email, and site domain are sent to wp-safety.org. No page content or credentials are transmitted.
One click to
connect.
No sign-up form. No API keys to copy-paste. Activate the plugin, click "Connect to WP-Safety" in the admin notice, and you're done. Your site is linked, scores start flowing — and nothing is sent until you say so.
Want to claim your auto-provisioned account? Visit wp-safety.org and use "forgot password" with your admin email. You'll get full dashboard access with your monitored sites.
Plugin specs
Lightweight, privacy-respecting, and built for WordPress standards.
Compatible with WordPress 5.8 and above. Tested up to 6.7.
Works on PHP 7.4 or later. Zero external PHP dependencies.
Scores are cached locally using WordPress transients. Minimal API calls.
Fully open-source. Inspect the code, contribute, or fork it.
What data does the plugin send?
Used once to provision your account. Not shared with third parties.
Identifies your site for linking and dashboard display.
Sent to look up security scores. No other plugin data is included.
No page content, user data, database information, or credentials are ever transmitted.
Start seeing the risks you're ignoring.
Install the free plugin, activate it, and get security scores for every plugin on your site in under a minute.