MonkeyVuln

An audit tool for WordPress that scans a site, enumerates all its active plugins and themes, extracts their exact versions and cross-references them against major public vulnerability databases (Exploit-DB, NVD, NuPHP, PackageStats). Detects known CVEs, obsolete plugins, abandoned themes and outdated WordPress versions. No signup, no credentials, no tracking. Useful for security audits, due diligence and risk analysis. Built with Next.js frontend, accessible from any browser.