Title: WMS HealthScan Author: wmsplugins Published: September 17, 2026 Last modified: September 17, 2026 --- Search plugins ![](https://s.w.org/plugins/geopattern-icon/wms-healthscan.svg) # WMS HealthScan By [wmsplugins](https://profiles.wordpress.org/wmsplugins/) [Download](https://downloads.wordpress.org/plugin/wms-healthscan.1.0.0.zip) * [Details](https://wordpress.org/plugins/wms-healthscan/#description) * [Reviews](https://wordpress.org/plugins/wms-healthscan/#reviews) * [Installation](https://wordpress.org/plugins/wms-healthscan/#installation) * [Development](https://wordpress.org/plugins/wms-healthscan/#developers) [Support](https://wordpress.org/support/plugin/wms-healthscan/) ## Description WMS HealthScan gives WordPress site owners a single, plain-English answer to “is my website in good shape?” It runs a series of local, read-only checks and explains what it found, why it matters, and what to do about it — without requiring any external account, subscription, or third-party service. This plugin is, and will remain, completely free. There is no premium version, no paid upgrade, no feature paywall, and no forced registration. Every feature described below is available to every user. **How the score works** Each category has a fixed weight. Checks that don’t apply to your site, or that could not be completed on your server, are excluded entirely — they never count against you. Critical issues weigh far more heavily than warnings. The dashboard always shows exactly which checks are affecting your score and by how much. **Privacy first** * No analytics, telemetry, or usage tracking of any kind. * No data is ever sent to an external server for scanning or scoring — every check runs locally. * The only outbound requests this plugin can make are the optional broken-link checks, which contact your own site or external sites already linked in your own content — never a third-party service. * No personal or visitor data is collected or stored. **Safe by design** This plugin never automatically updates, deactivates, or deletes plugins/themes, never changes your PHP version, never modifies your database schema, and never disables security features. The only automatic “fix” available is clearing expired transients, which is safe and fully reversible. Every other recommendation links you to the correct native WordPress screen so you stay in control. ### Features * **WordPress Core** — whether an update is available and why that matters. * **Plugins** — total/active/inactive counts, pending updates, and a conservative heuristic for active plugins that have not confirmed compatibility with recent WordPress versions. * **Themes** — active theme, child-theme status, pending updates, and unused installed themes. * **PHP Environment** — your PHP version against the currently supported range, with plain-English risk explanations. * **SSL/HTTPS** — whether your site is fully configured for HTTPS, and a heuristic scan for obvious mixed content. * **Security Basics** — debug-mode exposure, the file editor, a default “admin” username, uploads directory listing, and WordPress version disclosure. This is explicitly _not_ a full security audit. * **Database** — approximate size, transient count, revision count, and autoloaded options size. * **Media** — oversized images and missing dimension metadata in a sample of your most recent uploads. * **Broken Links** — an opt-in, rate-limited background scanner for links in your published content. Off by default. * **Performance Signals** — page caching and persistent object cache detection. This is not a replacement for tools like Lighthouse or PageSpeed Insights. * **Backups** — detects whether a known backup plugin is active. This cannot confirm that backups are actually completing successfully. * **Scheduled Tasks** — whether WP-Cron is disabled and whether scheduled events are running on time. * **Website Health Score** — one transparent, explainable score with a full breakdown of what raised or lowered it. * **CSV export** — download your latest scan results at any time. ## Installation 1. Upload the plugin files to `/wp-content/plugins/wms-healthscan`, or install it directly from the Plugins screen in your WordPress admin. 2. Activate the plugin through the ‘Plugins’ screen. 3. Go to **WMS HealthScan** in your admin menu and click **Run Your First Scan**. ## FAQ ### Does this plugin send my site’s data anywhere? No. Every check runs locally against your own WordPress installation and database. The only network requests the plugin can make are the optional broken-link checks, and those only ever contact your own site or external sites that are already linked from your own published content. ### Will this plugin automatically fix problems it finds? Almost never automatically. The only exception is clearing expired transients, which is safe and reversible. For everything else, the plugin explains the issue and links you to the correct WordPress screen so you can act on it yourself. ### Is this a security scanner? No. It performs a small number of safe, non-invasive security configuration checks( debug mode, file editing, a default username, and similar). It is not a malware scanner and does not perform a comprehensive security audit. ### Can this plugin guarantee my backups are working? No. It can only detect that a recognized backup plugin is active. It cannot verify that backups are completing successfully or where they are stored. Always confirm backup status directly within your backup plugin or with your host. ### Does the broken-link checker slow down my site? It is off by default. When enabled, it checks links from your 200 most recently modified posts/pages (up to 500 unique links) in small batches every few minutes via WP-Cron, with short timeouts, so it should not have a noticeable effect on normal site performance. On very large sites, older content may not be covered in a single pass. ### Is there a paid version? No. This plugin is completely free with no premium tier. ### Does this plugin work on WordPress Multisite? Yes, on a per-site basis. Each site in a network runs and stores its own scan independently. There is currently no network-wide dashboard that aggregates results across all sites. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “WMS HealthScan” is open source software. The following people have contributed to this plugin. Contributors * [ wmsplugins ](https://profiles.wordpress.org/wmsplugins/) [Translate “WMS HealthScan” into your language.](https://translate.wordpress.org/projects/wp-plugins/wms-healthscan) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wms-healthscan/), check out the [SVN repository](https://plugins.svn.wordpress.org/wms-healthscan/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wms-healthscan/) by [RSS](https://plugins.trac.wordpress.org/log/wms-healthscan/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release. * Added the Website Health Score dashboard with a transparent, explainable scoring breakdown. * Added checks for WordPress core, plugins, themes, PHP version, HTTPS/SSL, basic security configuration, database health, media library size, performance signals, backups, and scheduled tasks (WP-Cron). * Added an opt-in, rate-limited background broken-link checker. * Added a Details tab with plain-English explanations and recommended actions for every check. * Added CSV export of scan results. * Added a safe, reversible “clear expired transients” maintenance action. ## Meta * Version **1.0.0** * Last updated **5 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.2 or higher ** * Tested up to **7.1.1** * PHP version ** 7.4 or higher ** * Tags * [database](https://wordpress.org/plugins/tags/database/)[health check](https://wordpress.org/plugins/tags/health-check/) [maintenance](https://wordpress.org/plugins/tags/maintenance/)[performance](https://wordpress.org/plugins/tags/performance/) [security](https://wordpress.org/plugins/tags/security/) * [Advanced View](https://wordpress.org/plugins/wms-healthscan/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/wms-healthscan/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wms-healthscan/reviews/) ## Contributors * [ wmsplugins ](https://profiles.wordpress.org/wmsplugins/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wms-healthscan/)