Which plugins does that WordPress site use, and are they safe?
Paste a website address. PluginPeek lists the plugins and versions it can see from the outside, and checks each version against the Wordfence Intelligence vulnerability database.
Faster: check any site while you browse
The free PluginPeek extension shows the theme, plugins, versions and a count of known vulnerabilities for whatever site you are on, in one click.
Questions
Is this a hacking tool?
No. PluginPeek only reads the public pages any browser downloads, and shows only public advisory information (never exploit details). Nothing is logged into or tested. Use it on sites you own, manage, or have permission to evaluate.
How accurate are the versions?
Versions come from the files the site loads, its generator tags and plugins' public readme files. Some plugins hide their version; those are listed but cannot be matched.
What should I do if my site has a vulnerable plugin?
Back up the site, then go to Dashboard > Updates and update the plugin. In most cases a fixed version already exists. If you would rather not do it yourself, we can do it for a fixed $99, paid after you have checked the site.
Does it find every plugin?
It finds plugins that load files on the public page. Back-end-only plugins (for example some security or backup plugins) leave no public trace.
Also try the WordPress theme detector, or browse the latest WordPress plugin vulnerabilities.