How does Lemwatch detect WordPress plugins and themes?

Lemwatch fingerprints WordPress sites by parsing the HTML and headers, then tracks plugin/theme versions and alerts on new releases.

Quick answer

On each check we scan the HTML for wp-content/plugins/<slug> and wp-content/themes/<slug> paths, extract version numbers from CSS/JS query strings, and cross-reference the WordPress.org registry for updates and CVEs.

What you get

• List of active plugins and versions
• Active theme (parent + child)
• WordPress core version
• Available updates
• Known CVEs tied to each version

Where to find it in Lemwatch

Site → Technology → WordPress.

FAQ

Does this work if my host hides version strings?

We fall back to file-fingerprinting; premium plugins may not resolve.

Related

• Change detection
• Security headers