Vulnerabilities
WordPress vulnerability monitoring across all your client sites.
See which plugins and themes are vulnerable on which sites, grouped per vulnerability, and fix them with a tested update: on your approval, or automatically for high and critical issues.
No credit card. Every update is checked, and the risky ones are tested on a copy first.
The problem
A vulnerability list is not a fix
Most tools can tell you that a plugin has a known vulnerability. The work starts after that: on which client sites is it installed, is there a fixed version yet, is the licence active, and will the update break the site? Multiply that by every vulnerability on every site, and the list keeps growing.
Verploy connects the warning to the fix: it shows what is affected and what to do, and fixes it through the same safe update route as every other update.
How it works
From warning to fixed, safely
Grouped per vulnerability
Wordfence Intelligence data, grouped per vulnerability across all your sites, with a link to the source record. Only critical and high issues make a site “needs attention”.
Ask first, or fix automatically
By default Verploy asks before it fixes. Or let it fix high and critical issues automatically, always through a tested update.
Waiting for a fix
When no fixed version exists yet, the site shows “no fix available yet” and moves back to “needs attention” as soon as a fix appears.
Premium plugins
When an update is missing because a licence is not active, Verploy says so and lets you upload the new version as a ZIP, which then goes through the safe route.
In the dashboard
What you see per site
- Vulnerable plugins and themes, with severity
- Whether a fixed version exists
- The update that fixes it, with its risk (low, medium, high)
- An alert when a serious vulnerability needs you
Questions
Frequently asked questions
Where does the vulnerability data come from?
From Wordfence Intelligence. Each vulnerability links to its source record.
Will Verploy update plugins without asking?
Only if you choose that. The default is to ask first. You can let Verploy fix high and critical issues automatically; it always uses a tested update.
What about vulnerabilities without a fix?
The site shows that it is waiting for a fix. For a critical issue without a fix, Verploy advises considering disabling or replacing the plugin.
Read next
Spend less time checking WordPress.
Let Verploy do the maintenance work.
Free on up to 3 sites. No credit card. The first 30 agencies keep 40% off for life.