Terms of Use

Acceptable use. PluginPeek reads only what a website publicly serves to every visitor. Use it to check sites you own, manage, or are authorized to assess, and for general research. You must not use PluginPeek, its API, or its reports to attack, exploit, threaten, extort, or gain unauthorized access to any system. Automated bulk scanning of the API is not permitted.

No exploit information. We show only public advisory metadata (component, severity, CVE, affected and fixed versions, and a link to the Wordfence advisory). We do not provide exploit code or instructions.

Rate limits. Requests are rate-limited per IP address. We may block abusive traffic and revoke licenses used in breach of these terms without refund.

Accuracy. Detection is based on public signals and can be incomplete or wrong (for example when a site hides versions). Results are provided "as is" without warranty. Always confirm versions in the site's own dashboard before acting.

Pro subscriptions. Monthly plans renew until canceled and can be canceled at any time; access continues to the end of the paid period. Lifetime licenses cover the life of the product. Refunds within 14 days on request.

Third-party data. Vulnerability data provided by Wordfence Intelligence, used under its license; CVE data may be © The MITRE Corporation. WordPress is a trademark of the WordPress Foundation; PluginPeek is not affiliated with or endorsed by the WordPress Foundation, Automattic, or Defiant.

Contact: support@pluginpeek.com