{"id":385592,"date":"2026-10-14T09:56:21","date_gmt":"2026-10-14T09:56:21","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/vuln-watch\/"},"modified":"2026-10-14T10:25:03","modified_gmt":"2026-10-14T10:25:03","slug":"beleshield-vulnerability-scanner","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/beleshield-vulnerability-scanner\/","author":23584799,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"0.4.2","stable_tag":"0.4.2","tested":"7.1.3","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"BeleShield Vulnerability Scanner","header_author":"Yan Sechet","header_description":"Scans your active plugins and themes for known vulnerabilities (CVE\/WPVDB) and alerts you when one is out of date.","assets_banners_color":"","last_updated":"2026-10-14 10:25:03","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"","rating":0,"author_block_rating":0,"active_installs":0,"downloads":70,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"0.4.1":{"tag":"0.4.1","author":"beletech76","date":"2026-10-14 09:56:06","revision":3745923},"0.4.2":{"tag":"0.4.2","author":"beletech76","date":"2026-10-14 10:25:03","revision":3746002}},"upgrade_notice":[],"ratings":[],"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.4.1","0.4.2"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[2391,6464,600,6460],"plugin_category":[54],"plugin_contributors":[286714,78154],"plugin_business_model":[],"class_list":["post-385592","plugin","type-plugin","status-publish","hentry","plugin_tags-plugins","plugin_tags-scanner","plugin_tags-security","plugin_tags-vulnerability","plugin_category-security-and-spam-protection","plugin_contributors-beletech76","plugin_contributors-freemius","plugin_committers-beletech76"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/beleshield-vulnerability-scanner.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"<!--section=description-->\n<p>BeleShield Vulnerability Scanner scans the active plugins and themes on your WordPress\nsite and alerts you as soon as one of them has a known, published vulnerability (CVE),\nusing an external vulnerability database.<\/p>\n\n<p>Free version: manual scan of plugins, with full detail for every vulnerability found\n(CVE, severity, source link).<\/p>\n\n<p>Pro version: automatic daily scan, scan of themes in addition to plugins, and automatic\nemail alerts.<\/p>\n\n<h3>External services<\/h3>\n\n<p>This plugin connects to the following third-party services:<\/p>\n\n<p><strong>WPVulnerability<\/strong> (wpvulnerability.net)\nUsed to look up known vulnerabilities for each active plugin and theme. On every scan\n(manual, or automatic daily scan in the Pro version), the slug and version number of\neach active plugin\/theme is sent to this service; no other data is transmitted.\n<a href=\"https:\/\/www.wpvulnerability.com\/privacy\/\">Privacy Policy<\/a> -\n<a href=\"https:\/\/www.wpvulnerability.com\/license\/\">Data License<\/a><\/p>\n\n<p><strong>Freemius<\/strong> (freemius.com) - Pro version only\nUsed to manage the license and subscription for the Pro plan. Account and billing data\nentered at checkout is sent to and processed by Freemius as merchant of record.\n<a href=\"https:\/\/freemius.com\/privacy\/\">Privacy Policy<\/a> -\n<a href=\"https:\/\/freemius.com\/terms\/\">Terms of Service<\/a><\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>beleshield-vulnerability-scanner<\/code> folder to <code>\/wp-content\/plugins\/<\/code>.<\/li>\n<li>Activate the plugin from the \"Plugins\" menu in WordPress.<\/li>\n<li>Go to Settings &gt; BeleShield Vulnerability Scanner to run your first scan.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20the%20plugin%20modify%20my%20site%3F\"><h3>Does the plugin modify my site?<\/h3><\/dt>\n<dd><p>No, BeleShield Vulnerability Scanner is read-only: it checks the versions of your active\nplugins\/themes against a database of known vulnerabilities, without ever modifying any\nfile.<\/p><\/dd>\n<dt id=\"what%20data%20is%20sent%20outside%20my%20site%3F\"><h3>What data is sent outside my site?<\/h3><\/dt>\n<dd><p>On each scan, BeleShield Vulnerability Scanner sends only the slug and version number of\neach active plugin\/theme to the external service WPVulnerability (wpvulnerability.net),\nin order to check for known vulnerabilities. No other data (site content, personal\ninformation, user data) is transmitted. Responses are cached locally for 12 hours to\nlimit the number of requests.<\/p>\n\n<p>This service is provided by WPVulnerability: <a href=\"https:\/\/www.wpvulnerability.com\/privacy\/\">Privacy Policy<\/a>,\n<a href=\"https:\/\/www.wpvulnerability.com\/license\/\">Data License<\/a>.<\/p>\n\n<p>The Pro version also communicates with Freemius servers (freemius.com) for license and\nsubscription management, per their <a href=\"https:\/\/freemius.com\/privacy\/\">Privacy Policy<\/a> and\n<a href=\"https:\/\/freemius.com\/terms\/\">Terms of Service<\/a>.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>0.4.2<\/h4>\n\n<ul>\n<li>The Pro plan is now purchasable: <code>has_paid_plans<\/code> is set to <code>true<\/code> now that the\nPro plan is unhidden and live on Freemius. No functional change to the code.<\/li>\n<\/ul>\n\n<h4>0.4.1<\/h4>\n\n<ul>\n<li>Removed the hard-coded cron no-op: the daily automatic scan is now gated the same way\nas the rest of the Pro-only features, directly behind an <code>is_paying_or_trial__premium_only()<\/code>\ncall, so there is no dead\/disabled code shipped in the free package.<\/li>\n<\/ul>\n\n<h4>0.4.0<\/h4>\n\n<ul>\n<li>Renamed the plugin to \"BeleShield Vulnerability Scanner\" (previously \"Vuln Watch\") to\navoid confusion with existing trademarked vulnerability-scanning services.<\/li>\n<li>The free version now shows the full detail of every vulnerability found (CVE, severity,\nsource link) instead of a count only. The Pro plan now only adds features that are\nphysically absent from the free package: automatic daily scan, theme scanning, and\nautomatic email alerts.<\/li>\n<li>Translated the readme and plugin description to English.<\/li>\n<li>Added Terms of Service \/ Privacy Policy links for the external services used.<\/li>\n<\/ul>\n\n<h4>0.3.2<\/h4>\n\n<ul>\n<li>Updated \"Tested up to\" (7.1) for WordPress.org compliance.<\/li>\n<\/ul>\n\n<h4>0.3.1<\/h4>\n\n<ul>\n<li>WordPress.org compliance: the email alert function (Pro plan) remained present in the\ncode, even though inaccessible without a license, because only its call site was\nremoved from the free package. It is now itself marked __premium_only() and therefore\nphysically absent from the free package, like theme scanning.<\/li>\n<\/ul>\n\n<h4>0.3.0<\/h4>\n\n<ul>\n<li>WordPress.org compliance: Pro plan features (theme scanning, automatic email alerts)\nare now removed from the free version's code at build time, instead of merely being\nhidden behind a license check.<\/li>\n<li>Disclosed the data sent to the external vulnerability service in this file.<\/li>\n<\/ul>\n\n<h4>0.2.0<\/h4>\n\n<ul>\n<li>Theme scanning in addition to plugins (Pro plan).<\/li>\n<li>Explicit handling of vulnerability API failures (no more silent false \"no\nvulnerability detected\").<\/li>\n<li>Freemius integration for license and subscription management.<\/li>\n<\/ul>\n\n<h4>0.1.0<\/h4>\n\n<ul>\n<li>First version: scan of active plugins against the WPVulnerability database.<\/li>\n<\/ul>","raw_excerpt":"Alerts you when an active plugin or theme has a known, unpatched vulnerability (CVE\/WPVDB).","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/385592","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=385592"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/beletech76"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=385592"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=385592"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=385592"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=385592"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=385592"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=385592"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}