Monitoring

    How does Lemwatch detect WordPress plugins and themes?

    Lemwatch fingerprints WordPress sites by parsing the HTML and headers, then tracks plugin/theme versions and alerts on new releases.

    Updated 2026-07-10
    1 min read
    wordpress
    fingerprint
    plugins

    Quick answer#

    On each check we scan the HTML for wp-content/plugins/<slug> and wp-content/themes/<slug> paths, extract version numbers from CSS/JS query strings, and cross-reference the WordPress.org registry for updates and CVEs.

    What you get#

  1. List of active plugins and versions
  2. Active theme (parent + child)
  3. WordPress core version
  4. Available updates
  5. Known CVEs tied to each version
  6. Where to find it in Lemwatch#

    Site → Technology → WordPress.

    FAQ#

    Does this work if my host hides version strings?#

    We fall back to file-fingerprinting; premium plugins may not resolve.

  7. Change detection
  8. Security headers
  9. Was this article helpful?