WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.
Maintained alternatives you can try now
Active on WordPress.org, updated in the last 18 months, and doing the same job. Each one opens in a live sandbox.
Receive information about possible vulnerabilities in your WordPress from WordPress Vulnerability Database API.
Limit rate of login attempts and block IP temporarily. Brute force attack protection. GDPR compliant. Captcha enabled.
About Timthumb Vulnerability Scanner
The recent Timthumb.php vulnerability (discussed here) has left scores of unsuspecting bloggers hacked. It’s the perfect combination of not so easy to fix for the technically disinclined, and easy to find and exploit for the malicious – resulting in a disastrous number of compromised sites.
The Timthumb Vulnerability Scanner plugin will scan your entire wp-content directory for instances of any outdated and insecure version of the timthumb script, and give you the option to automatically upgrade them with a single click. Doing so will protect you from hackers looking to exploit this particular vulnerability.
After new, lesser vulnerabilities were found, it became apparent that the plugin needs to be dynamic – able to keep you up to date with the latest version of timthumb, without requiring a plugin upgrade. The plugin now checks for the latest available version of timthumb routinely (each time you visit the scanner page, but no more than once a day), and can download and install the latest version, rather than the one included with the plugin. Scans are run daily (unless you disable them via the options link on the scanner page) via wp-cron to keep up with any new plugins or themes you’ve installed.
More info at CodeGarage.
Special thanks to Jacob Gillespie for help with the bulk upgrade feature.
Frequently asked questions
What does the Timthumb Vulnerability Scanner do?
The Timthumb Vulnerability Scanner plugin scans your entire wp-content directory for instances of outdated and insecure versions of the timthumb script. It provides an option to automatically upgrade them with a single click.
How does the plugin stay updated with the latest Timthumb versions?
The plugin routinely checks for the latest available version of timthumb (once a day when visiting the scanner page). It can download and install the latest version, rather than relying on the version included with the plugin.
How often does the plugin scan for vulnerabilities?
Scans are run daily via wp-cron to keep up with any new plugins or themes you've installed. This can be disabled via the options link on the scanner page.
