VulnCue

WordPress doesn't tell you when one of your plugins or themes has a known vulnerability — you only find out after something breaks, or after an attacker does. VulnCue closes that gap: it checks your site's exact plugin and theme versions against real CVE/NVD/OpenCVE vulnerability data and gives you a risk score plus a plain-language explanation of what's wrong and how to fix it — no agent or code running on your server. It's built for anyone who manages a WordPress site, from solo site owners to agencies running many client sites. A free plan covers one site with a monthly scan; paid plans add more frequent scanning, multiple sites, PDF reports and white-label reporting for agencies. VulnCue also ships a free companion WordPress plugin with local security checks and its own built-in two-factor authentication — no separate 2FA plugin needed.