MainWP Vulnerability Checker v4.1

The MainWP Vulnerability Checker extension uses the free MainWP NVD API or the paid WPScan Vulnerability Database API to provide you with information about vulnerable plugins and themes on subsites so you can act accordingly.

Get information about vulnerable plugins and themes and what's wrong directly from your MainWP dashboard.

  • Vulnerability extensions gather up-to-date information in real-time.
  • Get notifications about vulnerabilities on your website.
  • Update vulnerable plugins.
  • Remove vulnerable plugins.


This is a free API provided by the US Department of Commerce's National Institute of Standards and Technology (NIST).

NIST NVD is the US government's repository of standards-based vulnerability management data represented using the Security Content Automation Protocol (SCAP).This data enables automation of vulnerability management, security measurement and compliance.NVD includes a database of security checklist references, security-related software defects, misconfigurations, product names, and impact metrics.


The WPScan Vulnerability Database is an online browsable version of the WPScan data files used to detect known WordPress core, plugin, and theme vulnerabilities.Since the release of WPScan, this database has been compiled by the WPScan team and various other contributors. BruCON's 5by5 project funded the development of the WPScan vulnerability database.

Changelog: MainWP Vulnerability Checker

Version 4.0.4 – 12-8-2021
Updated: PHP 8 compatibility

Version – 9-10-2020
Updated: MainWP Dashboard 4.1 compatibility

Version 4.0.3 – 4-13-2020
Fixed: multiple typos

Version 4.0.2 – 3-6-2020
Fixed: multiple cosmetic issues
Added: option to disable automated checks
Preventative: security improvements

Version 4.0.1 – 10-1-2019
Added: option to save WPVulnDB Token
Added: saveState property to the sites list
Added: colReorder property to the sites list
Added: horizontal scroll to the sites list
Updated: support for WPVulnDB API v3
Updated: multiple cosmetic updates

Version 4.0 – 8-28-2019
Updated: extension UI/UX redesign
Updated: support for the MainWP 4.0

Version 1.5 – 10-19-2018
Fixed: an issue with triggering checks via an external cron job

Version 1.4 – 6-29-2018
Updated: plugin/theme update button will not show if there is no update available

Version 1.3 – 4-19-2018
Fixed: an issue with an empty response from WPVulnDB server

Version 1.2 – 1-26-2018
Fixed: an issue with a missing hook parameter

Version 1.1 – 12-15-2017
Fixed: an issue with the extension activation
Fixed: an issue with forcing the sites recheck process
Added: French translation

Version 1.0 – 2-24-2017
First version