zer0sh Site Health Monitor

zer0sh Site Health Monitor is an open-source, ultra lightweight plugin that evaluates the overall state of your WordPress installation on a single screen: performance, core and extension updates, security vulnerabilities, and site-health fundamentals. It answers one question: is my WordPress updated, supported, secure and well configured?

• PHP checks — version and support status, memory limit, display_errors, required extensions, and PECL assumptions.
• WordPress core — installed version vs latest available.
• Updates — plugins and themes with pending updates.
• Security — HTTPS, XML-RPC, file editing (DISALLOW_FILE_EDIT), debug mode and security headers.
• Site health — cron and loopback checks.
• Vulnerability scanning — checks installed components against the public WPVulnerability database.

Diagnostic checks run locally on your own server with no accounts, no API keys, and no telemetry. To identify known security vulnerabilities in your installed components, the plugin queries the public WPVulnerability API. Results are cached with WordPress transients (12 hours by default) so it has negligible overhead.

External services

This plugin connects to an external API to obtain security vulnerability information for your WordPress installation.

• Service name: WPVulnerability API (provided by ROBOTSTXT, Santa Coloma de Gramenet, Barcelona, Spain).
• Service URL: https://www.wpvulnerability.net/
• What data is sent and when: Only software identifiers (slugs) and installed version numbers of WordPress core, installed plugins, and active themes are transmitted. Data is sent via HTTPS GET requests only when an administrator triggers a manual scan or when a scheduled diagnostic scan runs.
• Privacy and data protection: No personal data, user credentials, passwords, cookies, or site content are transmitted or stored.
• Terms of Service: https://www.robotstxt.es/legal/
• Privacy Policy: https://www.wpvulnerability.com/privacy/