Exploit Scanner

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 87% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ Antonio Augusto

   5.4y ago

   Apparently abandoned or confuse. This topic was modified 5 years, 3 months ago by Antonio Augusto.

   Read on wp.org ↗
2. ★★★★★ C77

   7.2y ago

   Doesn´t work at all… it always shows an error, try later.

   Read on wp.org ↗
3. ★★★★★ scorpiotiger

   8.2y ago

   Just gives an error: {“status”:”error”,”message”:”$this->files was not an array”,”data”:{“start”:250,”files”:”b:0;”}} Others have posted in the support section and not had responses and the plugin has not been updated for a long time, so it looks to be an abandoned project.

   Read on wp.org ↗
4. ★★★★★ carolzeroum

   8.5y ago

   Exploit Scanner is a useless plugin. I mean, it does nothing. It just lists hundreds of files of your server. Says nothing about them. And does nothing either. In the end, it says you are a PARANOID. If you have any further worries. I think I will create a WordPress plugin too.

   Read on wp.org ↗
5. ★★★★★ Eduard Doloc

   8.8y ago

   Great plugin, but it’s not well documented. Anyways, it works on version 4.8.3 and theoretically any version as long as you generate (if you don’t have) the hashes for your wordpress version; in my case I had to generate for 4.8.3 and it did a good job 🙂

   Read on wp.org ↗
6. ★★★★★ enacta2

   9.2y ago

   Works really well. I have it installed next to TAC and VIP Scanner on my localhost test site. The trick is you need to use current hashes, and none are available for WordPress 4.8 and higher on the Internets. So, here are hashes for WordPress 4.8. And easy to follow directions to create new hashes for newer versions of WordPress: https://wordpress.org/support/topic/here-you-go-hashes-4-8-php/ This topic was modified 9 years ago by enacta2. Reason: Phrasing

   Read on wp.org ↗
7. ★★★★★ Ovidiu Zeicu

   9.2y ago

   A LOT of WP core files on fresh install are included on the Level Severe results section, most of them having “Unknown file found” in the description. If the plugin doesn’t even know which files are core files, how should I trust it with other files? Working with MD5 hashes is not for everyone, so it’s definitely not for beginners.

   Read on wp.org ↗
8. ★★★★★ mark200789

   9.5y ago

   I’m pretty tech savvy, but creating a hash file for my site is beyond my abilities. That’s what this scanner needs or it will mark every single files and unknown and corrupted. And it won’t tell you until after you’ve finished scanning. It’s nowhere in the online instructions. Waste of time unless you are a command line guru.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.5.2 Added hashes for WordPress 4.7.5 1.5.2
2. — Version 1.5.1 WordPress 4.6 hashes WordPress 4.6.1 hashes WordPress 4.7 hashes 1.5.1
3. — Version 1.5 WordPress 4.5.3 hashes Move to follow WP versioning system 1.5
4. — Version 1.4.12 WordPress 4.5.2 hashes 1.4.12
5. — Version 1.4.11 WordPress 4.5 hashes WordPress 4.5.1 hashes 1.4.11
6. — Version 1.4.10 WordPress 4.4.1 hashes 1.4.10

1 disclosed vulnerability on record for this plugin, fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 Exploit Scanner <= 1.3.3 - Full Path Disclosure ↗
   2013-05-29 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.3.3 Patched in 1.3.4

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-07 9K+ → 8K+ down after 153 days in tier
2. 2026-01-05 10K+ → 9K+ down after 1138 days in tier
3. 2022-11-24 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 2 shared tags A
• Sucuri Security – Auditing, Malware Scanner and Security Hardening 600K+ installs · 4.2★ · 2 shared tags A
• Anti-Malware Security and Brute-Force Firewall 100K+ installs · 4.9★ · 2 shared tags A
• NinjaScanner – Virus & Malware scan 30K+ installs · 4.1★ · 2 shared tags B
• Stop Spammers Classic 30K+ installs · 4.4★ · 2 shared tags A
• Zero Spam for WordPress 20K+ installs · 4.1★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Exploit Scanner into a readme, a review or a deck. It updates itself.

Exploit Scanner: 8K+ active installs, 3.2★ (40 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/exploit-scanner