Free · no account

WordPress check

Paste an address and we detect WordPress from the outside, read its version and theme, and check a handful of common exposures.

We only fetch public URLs, like any visitor. Nothing is stored, no account required.

What the check shows

Everything is fetched from the outside – no plugin, no login to the site.

Version & theme

Whether it is WordPress, which version is running and the active theme.

Common exposures

readme, XML-RPC, user enumeration via REST and a public debug log.

Without touching the site

We only read public URLs – the same ones any visitor can reach.

WordPress checker — questions

From the outside it identifies whether a site runs WordPress, the version and theme where exposed, and common misconfigurations that are publicly visible.

No. It only reads what is publicly available, no credentials, no plugin, no account.

Many sites hide the version, which is good practice. The checker reports only what is publicly exposed.

Two layers. From the outside, the free Ravnsight plan watches uptime, the certificate and the domain with no install, and alerts you by e-mail. To see inside WordPress — PHP errors, plugin and theme changes, failed updates — in Ravnsight, you need Pro: Pro connects the Ravnsight Detective plugin to your account, so those internal errors flow straight into Ravnsight, lined up with the outage that explains them. (The free Detective plugin also runs standalone inside wp-admin, but that view stays local — Pro is what brings it into Ravnsight.)

Learn about WordPress monitoring

See inside your WordPress, not just the outside

Ravnsight Detective catches errors and changes from within the site – and flags risky exposures.

Ravnsight assistant
Hi! I can answer questions about Ravnsight — how to monitor sites, set up alerts, use the plugin and more. What would you like to know?
Thinking …