---
title: "How does Lemwatch detect WordPress plugins and themes? —…"
description: "Lemwatch fingerprints WordPress sites by parsing the HTML and headers, then tracks plugin/theme versions and alerts on new releases."
canonical: "https://lemwatch.com/help/wordpress-fingerprinting"
source: "https://lemwatch.com"
---

# How does Lemwatch detect WordPress plugins and themes?

> Lemwatch fingerprints WordPress sites by parsing the HTML and headers, then tracks plugin/theme versions and alerts on new releases.

## Quick answer

 On each check we scan the HTML for wp-content/plugins/<slug> and wp-content/themes/<slug> paths, extract version numbers from CSS/JS query strings, and cross-reference the WordPress.org registry for updates and CVEs.

## What you get

- List of active plugins and versions

- Active theme (parent + child)

- WordPress core version

- Available updates

- Known CVEs tied to each version

## Where to find it in Lemwatch

 **Site → Technology → WordPress**.

## FAQ

### Does this work if my host hides version strings?

 We fall back to file-fingerprinting; premium plugins may not resolve.

## Related

- Change detection

- Security headers


## Related

- [Help centre](https://lemwatch.com/help)
- [Change Detection & Volatility Alerts](https://lemwatch.com/help/change-detection)
- [Security Headers Explained](https://lemwatch.com/help/security-headers)
- [What is the Money Page Monitor?](https://lemwatch.com/help/money-page-monitor)
- [What is Autopilot Safe Mode?](https://lemwatch.com/help/autopilot-safe-mode)
- [Lemwatch pricing](https://lemwatch.com/pricing)
- [X-Frame-Options / frame-ancestors check](https://lemwatch.com/help/x-frame-options-check)
- [Embeddable Monitoring Widgets](https://lemwatch.com/help/widget-embeds)