Free
Free
Researcher plan copy allows free non-commercial CLI and API use capped at 25 API calls per day.
- Access
- Researcher plan copy allows free non-commercial CLI and API use capped at 25 API calls per day.
official WPScan
● Identity checkedAssistant · Vendor site 2026-10-04
WPScan is a WordPress vulnerability scanner and API backed by a catalog of core, plugin, and theme security issues. Security teams and researchers use the CLI scanner, vulnerability database, and commercial API alerts to monitor WordPress estates.
- Category
- Assistant
- Free access
- Researcher plan copy allows free non-commercial CLI and API use capped at 25 API calls per day.
- API access
- Site documents a vulnerability API with enterprise endpoints, webhooks, and CLI tooling for researchers.
Is official WPScan right for you?
A good fit for
WordPress maintainers, agencies, and researchers who need continuous vulnerability intelligence.
Before you choose
Enterprise pricing is quote-based by number of sites rather than a public monthly USD card price.
WordPress security intelligence
WPScan.com combines a maintained vulnerability database with scanning tools and API access so teams can detect issues affecting WordPress sites and plugins.
What it can do
Features & capabilities
Unknown is different from unavailable. Each fact carries its own evidence.
| Capability | Value | Evidence | Checked |
|---|---|---|---|
| Vulnerability catalog | Homepage states the database catalogs tens of thousands of WordPress core, plugin, and theme vulnerabilities. | Facts sourced | 2026-10-04 |
| Researcher tier | Pricing page offers researchers free CLI and API access with a 25 API calls per day cap. | Facts sourced | 2026-10-04 |
Understand the total cost
official WPScan pricing & plans
Alternatives to official WPScan
View all ↗
Breezy HRBreezy HR is hiring software combining applicant tracking, collaborative interviewing, and Breezy Intelligence automation for recruiting teams. Public plans range from a free Bootstrap tier for trying core ATS workflows to paid Startup, Growth, and Business tiers for active hiring.
Explore tool
AskNewsAskNews provides licensed news infrastructure for AI products, combining a News API, DeepNews agentic research, and alerts over hundreds of thousands of web sources plus thousands of licensed publishers. It targets teams that need structured, trustworthy news context instead of scrapers or raw article feeds.
Explore tool
Salesforce Service CloudSalesforce Service Cloud is customer service software that combines case management, self-service, analytics, and Agentforce AI agents on one CRM platform. It supports contact centers, field service, IT service, and AI-assisted support workflows for large organizations.
Explore toolThe practical questions
Frequently asked questions
Where does the vulnerability data come from?
WPScan FAQ explains entries are manually verified by WordPress security professionals sourced from the community, researchers, and their own findings as a CVE Numbering Authority.
What is official WPScan used for?
WPScan is a WordPress vulnerability scanner and API backed by a catalog of core, plugin, and theme security issues. Security teams and researchers use the CLI scanner, vulnerability database, and commercial API alerts to monitor WordPress estates.
Does official WPScan have a free plan?
Researcher plan copy allows free non-commercial CLI and API use capped at 25 API calls per day.. This record lists ongoing free access; check the plan limits before starting.
How much does official WPScan cost?
No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.
Can I use official WPScan through an API?
Site documents a vulnerability API with enterprise endpoints, webhooks, and CLI tooling for researchers.. API access and subscription access may have different terms; consult the linked sources.
What should I check before choosing it?
Enterprise pricing is quote-based by number of sites rather than a public monthly USD card price.
Price history
No retained pricing changes yet. A current price alone does not establish a historical trend.
How this profile is supported
Identity and profile
Reviewed vendor source
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.