Themes
All themesNo clustered themes yet.
Market
Wpscan matters only if the evidence supports a paid workflow around keeping sites trusted, protected, and recoverable, not a list of isolated fixes. The current commercial thesis is: Security, spam, and trust failures create business risk that owners struggle to triage. The entry wedge is to turn security and abuse signals into prioritized actions, audit trails, and recovery-ready reporting.
Commercial opportunities need traceable source links before they are treated as build-worthy.
79.8% of this page's analysis has direct source links.
0 rows here require auditable proof before promotion.
0 rows have source counts but still need direct links.
Build a trust and abuse-prevention operations plugin for site owners, agencies, and maintenance teams: Security, spam, and trust failures create business risk that owners struggle to triage. The first wedge is to turn security and abuse signals into prioritized actions, audit trails, and recovery-ready reporting.
The unmet need is not the individual complaint. It is the recurring business workflow: Security, spam, and trust failures create business risk that owners struggle to triage. Current stage: commercial watchlist.
No clustered themes yet.
Pain still appears around security, bugs despite praise for quality, reliable.
Pain still appears around bugs, support despite praise for quality, easy.
Pain still appears around security, missing feature despite praise for reliable, quality.
Weakness evidence: stale update history.
Useless in free version: users show security, compatibility, performance pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Useless in free version This plugin is waste of time when used with free API token (50 requests per 24 hours). complaint plugins redirect to settingsplugins redirect to settings: users show security, bugs, compatibility pain that may indicate a product gap.
Stop User Enumeration · plugins redirect to settings plugins page redirect to https://www.spiral.uk.com/wp-admin/options-general.php?page=stop-user-enumeration redirect remains after plugin uninstall savings settings does nothing to resolve this plugins page redirect to https://www.spiral.uk.com/wp-admin/options-general.php?page=stop-user-enumeration redirect remains after plugin u mixed Apparent false flag about http versus httpsApparent false flag about http versus https: users show security, bugs, performance pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Apparent false flag about http versus https I doubt that I will get me a paid subscription to this otherwise interesting plugin, because it keeps sending me email alerts with this warning: “Security check Website HTTPS The website does not seem to be using HTTPS (SSL/TLS) encryption for communications.” When I check for http:/ in the database or anywhere els complaint CaptchaCaptcha: users show security, bugs, compatibility pain that may indicate a product gap.
block-wpscan · Captcha I am also receiving the same issue Yank This had. complaint XML-RPC check failsXML-RPC check fails: users show security, bugs, compatibility pain that may indicate a product gap.
WPScan – WordPress Security Scanner · It fails with an error: Uncaught Error: Cannot use object of type WP_Error as array in [..]/wp-content/plugins/wpscan/security-checks/xmlrpc-enabled/check.php:85 Any ideas? complaint WPScan Deprecation and Support QuestionsWPScan Deprecation and Support Questions: users show security, bugs, performance pain that may indicate a product gap.
WPScan – WordPress Security Scanner · WPScan Deprecation and Support Questions Please note: This plugin is no longer actively supported for non-enterprise customers. complaint Option to disable SOME security checksOption to disable SOME security checks: users show security, missing feature, support pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Option to disable SOME security checks In https://wordpress.org/support/topic/option-to-disable-security-checks/ an option was added to enable/disable all checks. complaint file_get_contents creating errors when disabled on the serverfile_get_contents creating errors when disabled on the server: users show security, bugs, compatibility pain that may indicate a product gap.
WPScan – WordPress Security Scanner · file_get_contents creating errors when disabled on the server Hello, Would it be possible to remove the use of file_get_contents to prevent PHP warnings when allow_url_fopen is disabled on the server for tightened security. complaint Yank thisYank this: users show security, support, setup pain that may indicate a product gap.
block-wpscan · Yank this installed, activated locked out of my site on first use for hours. mixed Dashboard Widget Throws Fatal ErrorDashboard Widget Throws Fatal Error: users show security, bugs, compatibility pain that may indicate a product gap.
Whook Security · Dashboard Widget Throws Fatal Error Love the concept of this plugin! mixed Logging blocked enumeration attempts with a different status codeLogging blocked enumeration attempts with a different status code: users show security, bugs, compatibility pain that may indicate a product gap.
Stop User Enumeration · Logging blocked enumeration attempts with a different status code I have installed your plugin on one of my WordPress websites, and it has been working wonderfully. mixed 5-star rating message isn’t dismissible5-star rating message isn’t dismissible: users show security, bugs, compatibility pain that may indicate a product gap.
Stop User Enumeration · 5-star rating message isn’t dismissible Hello @alanfuller , Some weeks ago we installed this plugin into 250+ very heterogenous WP installations. mixed HTTPS/ SSL warning messageHTTPS/ SSL warning message: users show security, bugs, compatibility pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Just to confirm, when you installed the plugin it was showing that there was no https, then when you ran a scan, it correctly showed that there was? mixed Option to disable Security ChecksOption to disable Security Checks: users show security, bugs, compatibility pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Option to disable Security Checks Hi, Is it possible to include an option to disable all or individual “Security Checks”? mixed Does not work on installations with huge amount of filesDoes not work on installations with huge amount of files: users show bugs, compatibility, performance pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Does not work on installations with huge amount of files On WP installation with huge amount of files (pictures mostly) WPScan cannot complete scan because it reaches memory_limit or max_execution_time, whatever comes first. complaint Feature: remove author from post jsonFeature: remove author from post json: users show security, missing feature, support pain that may indicate a product gap.
WP Author Security · Feature: remove author from post json hello and thanks, your module is what i was looking, but i need also to remove author from pages, posts, custom posts and archives in json. complaint false HTTPS alertfalse HTTPS alert: users show security, bugs, support pain that may indicate a product gap.
WPScan – WordPress Security Scanner · But I have https redirect in my .htaccess and it works. complaint Enumeration via the login error messageEnumeration via the login error message: users show security, bugs, missing feature pain that may indicate a product gap.
Stop User Enumeration · Enumeration via the login error message Hi, This plugin doesn’t seem to stop email enumeration via the login error message. mixed Website breaks down oftenWebsite breaks down often: users show security, bugs, compatibility pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Website breaks down often https://www.loom.com/share/f043252d515d4542a7bc09fa15054af0 Hello SIR, Its a 14 seconds video which explained my sites issues. mixed Scan is taking too much timeScan is taking too much time: users show security, bugs, performance pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Scan is taking too much time Hi, After installing the plugin, I clicked the Report > Run All button 48 hours ago. complaint Security check XML-RPC EnabledSecurity check XML-RPC Enabled: users show security, support pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Security check XML-RPC Enabled There is no way to disable “Security check XML-RPC Enabled”. complaint Vulnerabilidad encontrada en el plugin que permite la enumeración de usuariosVulnerabilidad encontrada en el plugin que permite la enumeración de usuarios: users show security, performance pain that may indicate a product gap.
Stop User Enumeration · estaria encantado de colaborar con vosotros y daros acceso a la información descubierta. complaint Misspelling on vulnerability notification.Misspelling on vulnerability notification.: users show security, bugs pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Misspelling on vulnerability notification. complaint How to disable The XML-RPC interface is enabledHow to disable The XML-RPC interface is enabled: users show security, bugs pain that may indicate a product gap.
WPScan – WordPress Security Scanner · How to disable The XML-RPC interface is enabled On scanning I am getting this vulnerability report – ‘The XML-RPC interface is enabled. mixed NinjaFirewall LogNinjaFirewall Log: users show security, bugs, performance pain that may indicate a product gap.
Stop User Enumeration · NinjaFirewall Log I am using your plugin in addition to NinjaFirewall security. complaint User enumeration on login pageThe user reports that WordPress login errors still reveal whether usernames exist, enabling user enumeration despite the plugin.
Stop User Enumeration · user enumeration is still happening on the login page with its native error messages praise Works on my WP v6.4.3Works on my WP v6.4.3: users show security, bugs, compatibility pain that may indicate a product gap.
WP Author Security · Works on my WP v6.4.3 So annoying to constantly change my username or modify themes to stop script kiddies and hackers from finding my usernames simply from looking at a theme’s page source or running a basic script. complaint Plugin does not seem to be workingThe user can still access a REST endpoint listing users despite enabling all Stop User Enumeration settings, though the developer suspects another plugin creates the endpoint.
Stop User Enumeration · I am still able to go to https://gilbertieshomefragrances.com/wp-json/wp/v2/users and see the list of users. praise Great plugins, good jobGreat plugins, good job: users show security, bugs, setup pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Great plugins, good job It was easy to install and it keeps me informed about security issues. praise Great Minds Made Great PluginGreat Minds Made Great Plugin: users show security, support, migration pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Great Minds Made Great Plugin One of the Must-have security plugin for WordPress Websites. praise This plugin is greatThis plugin is great: users show security, missing feature, setup pain that may indicate a product gap.
block-wpscan · This plugin is great When I installed this plugin, Many spams are logged on admin page of this. neutral Uncaught Error: get_check_vulnerabilities()Uncaught Error: get_check_vulnerabilities(): users show security, bugs, compatibility pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Uncaught Error: get_check_vulnerabilities() Hello, I’m running version 1.15.2 of the plugin and keep getting the following error: [14-Jun-2021 11:05:32 Europe/London] PHP Fatal error: Uncaught Error: Call to undefined method WPScan\Checks\System::get_check_vulnerabilities() in /opt/bitnami/apps/wordpress/htdocs/wp-content/plugins/wpscan/app/Summary.php:188 S neutral Remove Google Fonts dependencyRemove Google Fonts dependency: users show compatibility, missing feature pain that may indicate a product gap.
Stop User Enumeration · In Europe, for example Germany, it’s forbidden to used Google Analytics / Google Fonts. praise A must for all wordpress sites!A must for all wordpress sites!: users show security pain that may indicate a product gap.
WPScan – WordPress Security Scanner · WPScan makes all the other security plugins I needed, obsolete! praise Must haveMust have: users show security pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Must have The best plugin for checking your security. complaint Do not use!Do not use!: users show bugs, compatibility, missing feature pain that may indicate a product gap.
WPScan – WordPress Security Scanner · The free account on WPscan and it’s 50 request cap can not cover a single website, and if you wait 24h it will check the whole site again not prioritising plugins that haven’t being check yet. complaint Found a user enumeration that is not stoppedFound a user enumeration that is not stopped: users show missing feature, support, migration pain that may indicate a product gap.
Stop User Enumeration · Found a user enumeration that is not stopped https://DOMAIN/wp-json/oembed/1.0/embed?url=https://DOMAIN/&format=json Reach out if you want the actual site/DOMAIN this is happening on WordPress 6.7.1 Plugin Version 1.6.3 This topic was modified 1 year, 3 months ago by JJO . complaint Keeps nagging ” You have entered an invalid API Token”Keeps nagging ” You have entered an invalid API Token”: users show bugs, compatibility, support pain that may indicate a product gap.
WPScan – WordPress Security Scanner · Keeps nagging ” You have entered an invalid API Token” Hi, I am using 1.15.2 and set my premium API token with define( 'WPSCAN_API_TOKEN') in my wp-config.php. mixed Broke My WebsiteBroke My Website: users show bugs, compatibility, performance pain that may indicate a product gap.
Stop User Enumeration · Broke My Website I installed this plugin and it seems to clash with the ‘SSH SFTP Updater Support’ plugin from Terrafrost. mixed does not work on domain based multisite installdoes not work on domain based multisite install: users show bugs, compatibility, missing feature pain that may indicate a product gap.
Stop User Enumeration · does not work on domain based multisite install Hello and thanks for this plugin.