VULNERABILITY SCANNER
A WordPress Vulnerability Scanner in Your Hosting Panel
A WordPress vulnerability scanner checks your core, plugin and theme versions against a list of known security holes. xCloud runs this scan every day for each WordPress site on paid plans, shows how serious each issue is, and can update vulnerable plugins for you. No plugin to install.
- Daily scan of core, plugins and themes
- Severity, CVSS score and fix version
- Optional auto update with a backup first
WHY IT MATTERS
Why Scan WordPress Plugins for Vulnerabilities?
Plugins are the weak spot
Most WordPress hacks start with an old plugin or theme that has a known hole.
Holes are public fast
Once a hole is published, bots look for sites still running that version.
Many sites, one list
Agencies see every vulnerable site across servers in one place.
WHAT YOU GET
What Does the xCloud Vulnerability Scanner Show?
Security Overview
Items scanned, vulnerabilities found and when the last scan ran.
Severity and CVSS score
Each issue is rated so you know what to fix first.
Update in one click
Click Update next to an insecure plugin or theme, or Ignore a risk you accept.
Auto update and backup
Turn on auto update per server, with an automatic backup before each update.
Alerts
Get notified by email, Slack, WhatsApp and other channels you set up.
Vulnerable Sites list
Team Settings shows every vulnerable site in your team.
HOW IT WORKS
How Do You Scan a WordPress Site in xCloud?
Turn on the scan
Open the server, then Security, then Vulnerability Settings, and turn on Enable Vulnerability Scan.
Choose sites
Pick the sites to scan, and turn on Enable Auto Update and Enable Auto Backup if you want them.
Review results
Open a site and go to Security, then Vulnerability Scan.
Fix
Click Details for the fix version, then Update.
LIMITS AND PLANS
What Does Each Plan Include?
Paid plans
The scan and auto update are part of xCloud's paid plans. Free plan teams are sent to billing.
Site Security PRO add-on
Adds Patchstack virtual patching, which blocks attacks on a hole before you update.
WordPress only
Laravel, PHP and Node.js sites do not have the Vulnerability Scan page.
A scan is not a fix
If no fixed version exists yet, the scan can only warn you. Virtual patching covers that gap.
Frequently Asked Questions
What people ask about WordPress Vulnerability Scanner on xCloud.
What is a WordPress vulnerability scanner?
It is a tool that compares the versions of WordPress core, plugins and themes on your site with a database of known vulnerabilities, and tells you which ones need an update.
How often does xCloud scan for vulnerabilities?
Every day. You can also click Rescan now on Security, then Vulnerability Scan to run it at once.
Can xCloud update vulnerable plugins automatically?
Yes. On the server's Vulnerability Settings page, turn on Enable Auto Update. xCloud then updates a vulnerable item within 24 hours of finding it. Turn on Enable Auto Backup to take a backup first.
Where does the vulnerability data come from?
The built-in scan uses Wordfence vulnerability data. Sites with the Site Security PRO add-on use Patchstack's vulnerability list instead, with its security score and blocked attacks.
What does Site Security PRO add?
Virtual patching from Patchstack, which blocks attacks on a known hole even before you update, plus earlier alerts and hardening rules. It is a paid add-on per site.
Find Vulnerable Plugins Before Bots Do
Daily scans, clear fix versions and optional auto updates for every WordPress site.