by
vulncue
5 (1 reviews)
VulnCue
Scans your WordPress security and tells you what to fix. Connect an account for alerts on new vulnerabilities.
VulnCue ranks #44,747 among WordPress.org plugins with 10+ active installations, is #1,834 of 5,058 in the Security category, a 5/5 rating from 1 reviews, and was last updated Oct 29, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.3.0
Current Version v1.3.0
Updated 1 week ago
Last Update on 29 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
#1,834 of 5,058 in Security
Top 50% by installs
Downloads -61.6% this week
Actively maintained
Rank
#44,747
—
No change
Active Installs
10+
-37.5%
KW Avg Position
105
0.2 worse
Downloads
354
+3 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(1 reviews)
Next Milestone 20
10+
20+
21,574
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 5 more installs to reach 20+
Rank Changes
Current
#44,747
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
1 reviews
Overall
100%
5
1
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.3.0
- Last Updated
- Oct 29, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- vulncue
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 1
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about VulnCue
Yes. VulnCue reads the exact PHP version running your site locally, inside WordPress, and tells you immediately whether it's affected by either of the two critical, unauthenticated remote-code-execution flaws patched in October 2026, and which exact patched version fixes it for your branch (8.2, 8.3, 8.4 or 8.5). PHP branches that no longer receive any security support at all (7.4, 8.0, 8.1) are already covered by the separate "unsupported PHP version" check. You can also check any site from the outside, with no plugin install, at our free online checker: vulncue.com/herramientas/comprobador-php2shell.
No. This plugin only sees what's visible from inside your WordPress installation. An external scan (like the one VulnCue runs from the outside, or a pentest) checks additional things that can only be seen from the outside: TLS certificate, HTTP headers, email SPF/DMARC records, mixed content, etc.
No. Scanning and the known-vulnerability check work without creating any account. The account is optional and only adds email alerts for new CVEs.
No. By design, it doesn't modify anything on your site — it only detects
moving a file, editing wp-config.php) is up to you or whoever manages the site.
No. The whole scan only runs when you open the plugin's screen in wp-admin — never for your visitors or on the public side of your site.
It starts at 0 and each finding adds points based on its severity: up to 30 for critical, 18 for high, 8 for medium, 3 for low, and 1 for informational — each additional finding of the same severity adds less and less, so lots of minor warnings don't drive up the risk as much as a single serious one. 0 means no problem was detected in the last scan, and 100 is the maximum risk.
You can click "Scan again" whenever you want. If you connect an account, it also scans itself automatically: every 7 days on the free account, every day on a paid plan.
Yes. Each site on the network is scanned separately (its own findings and risk level), and the Network Dashboard shows a combined summary of every site.
Everything the plugin saved on your WordPress is deleted, and the client area
