Keeping a track of which plugins and themes have vulnerabilities on sites can be a pain to have to deal with. WordPress plugins and themes are responsible for up to 90% of all WordPress vulnerabilities.
Patchstack WordPress Plugin
Patchstack (previously WebARX) launched a WordPress plugin and a free plan containing features such as;
- Component Detection
- Vulnerability Monitoring
- Real-time Threat Alerts
- Actionable Suggestions
After you have installed and activated the Patchstack plugin, it will add a new sub-menu item to;
Settings > Security
In order to use the plugin, you will need to create an account with Patchstack and then copy over the Site ID & Site Secret Key into the settings and click on the active button.
When you are logged into the Patchstack Dashboard, it will display the connected sites as well as any plugin, theme, and WordPress vulnerabilities that might exist on the site. Vulnerabilities will show for plugins that are currently deactivated.
The professional plan from Patchstack includes such features as;
- Virtual Patching
- Hardening
- Analytics & Reporting
- Access to Add-Ons
- Additional Seats
- Custom Firewall Rules
- Custom Alert Triggers
- 0-day Protection (OWASP Top 10)
- HTTP Security Headers Detection
- Domain name and SSL certificate expiration detection
If you are using any of the paid plans from Patchstack they include virtual patches for any affected plugins and themes that have been found vulnerable. Patchstack is an easy-to-use security service for your site which is well priced on any of the paid plans.
Useful links
- https://wordpress.org/plugins/patchstack/
- https://patchstack.com/solutions/
- https://docs.patchstack.com/en/
- https://app.patchstack.com/
Using any other security plugin to protect your WordPress website(s)? Head over to our integrated WordPress security solutions.