New WordPress vulnerabilities found last year
Security
Plugins and themes against known vulnerabilities
WordPress core version and patch status
User accounts and admin roles
Configuration and exposed files
11,334 new wordpress flaws over the last year.
91% of them were in plugins. How many plugins does your site use? Our free audit tells you which of yours need attention.
-
Security, speed and content checked
-
Detailed Report within 48 hours
-
Read-only access, nothing changed
-
No obligation, no card
-
11,334
-
10,331
Of them were in plugins
-
-5hrs
Median time from disclosure to mass exploitation
-
42%
Rise in new vulnerabilities on the year before
What do we audit?
Speed
Core Web Vitals on key pages
Plugin bloat and heavy scripts
Caching and image handling
Hosting response times
Content
Indexing and crawl issues
Broken links and redirects
Page titles and metadata
Structured data basics
How it works.
01
Tell us about your site
Fill in the form. It takes less than a minute.
02
Add read-only access
We email a secure link to set up a temporary read-only user. We never ask for your password.
03
Get your report
Within 48 hours, a plain-English report plus a short call to walk you through it.
Frequently Asked Questions
We can walk you through it on a short call. You can fix it yourself, have your current developer handle it, or ask us to do it.
Kaweb is UK-based and ISO 27001-certified. Access is logged, limited to the audit and closed when we are done.
Plugin versions, user accounts and configuration can only be checked properly from inside WordPress. After you submit, we email a secure link to create a temporary read-only user. Remove it as soon as you have your report.
Yes. There's no card, no contract and nothing to cancel. You get the report whether or not you work with us.
No. Read-only access means we can view but not change anything. Nothing is updated, installed or removed.
You get your report within 48 hours of granting access.
No. The report is yours to keep. If you want help, we'll suggest options, but there's no follow-up sales sequence and no pressure.
It depends on the issues. Many are quick updates. We'll give you a fixed quote for anything you want us to handle before we start any work.
Anything rated high or critical can usually be fixed within a few working days of your go-ahead.
Find out what's running on your website
Free. Read-only. Report within 48 hours.
Request your free auditTrusted by hundreds, used by millions
Proactive Maintenance Packages
Essentials
-
Site Audit & Health Check
-
Up to 15 standard plugin updates
-
WordPress core, all plugins and themes are upgraded monthly to the latest version, incorporating the latest speed and security fixes.
-
The site will be checked to ensure it is operational, and you’ll receive an email after each update detailing what’s been updated.
-
Monthly email report outlining exactly what was updated.
Standard
-
Site Audit & Health Check
-
Up to 25 standard plugin updates
-
WordPress core, all plugins and themes are upgraded monthly to the latest version, incorporating the latest speed and security fixes.
-
Contact forms are checked for errors and submitted (lead-generation sites)
-
One hour of fix time per month included if plugin or theme updates cause conflicts.
-
Monthly email report outlining exactly what was updated and any issues resolved.
eCommerce
-
Site Audit & Health Check
-
Up to 30+ standard plugin updates
-
WooCommerce core, WordPress core, all plugins, and themes are updated monthly to the latest version for security, speed, and compatibility.
-
Operational check after every update, including a test where one product is added to the cart (but not purchased) to ensure the checkout flow initiates correctly.
-
Language switching tested where applicable (for multilingual stores).
-
Contact forms checked for front-end errors and submitted
-
Up to two hours of fix time per month included if plugin or theme updates cause conflicts.
-
Monthly email report outlining exactly what was updated and any issues resolved.