Ultimate Auditor
Ultimate Auditor connects your site to Plugin Auditor , a plugin analysis service, and audits every plugin installed on your WordPress site. Each plugin gets an overall score from 0 to 100, a score in six categories, and a list of issues pinned to the exact file and line, all without leaving your da
Ultimate Auditor connects your site to Plugin Auditor , a plugin analysis service, and audits every plugin installed on your WordPress site. Each plugin gets an overall score from 0 to 100, a score in six categories, and a list of issues pinned to the exact file and line, all without leaving your dashboard.
It is an automated code and standards audit, not a known-vulnerability (CVE) scanner. It reads the plugin’s code and reports where it falls short.
What it audits
Over 100 automated checks across six categories:
- Security : nonces, capability checks, output escaping, input sanitisation, and safe database queries
- Code Quality : WordPress coding standards, deprecated functions, and risky patterns
- Performance : expensive operations, autoloaded options, and asset handling
- Compatibility : PHP and WordPress version support
- Privacy : data handling and external requests
- Accessibility : markup and ARIA practices
It also flags plugins that are abandoned, closed on WordPress.org, or have an update available.
How results are presented
- An overall score from 0 to 100 for each plugin, plus a score for each of the six categories
- Issue counts by severity: Critical, High, Medium, and Low
- Maintenance flags: update available, abandoned, or closed on WordPress.org
- A dashboard with site-wide category scores, the plugins that need attention, and your scan quota
- A link to the full report on pluginauditor.com, with every issue pinned to its file and line
Good to know
- This plugin is a client for Plugin Auditor. A free pluginauditor.com account and API key are required to run scans.
- Scanning is on demand. You trigger each scan; there is no background or scheduled scanning.
