A WordPress plugin that enables you to scan all sorts of themes and files and things.
Contributors: Mohammad Jangda, Automattic, Thorsten Ott, Michael Fields, Filipe Varela, Josh Betz, and Nick Daugherty
Requires WordPress version 3.4 or greater.
The plugin itself is simple a UI for the VIP Scanner library, which does all the heavy lifting. The library allows you to create arbitrary "Checks" (e.g. UndefinedFunctionCheck), group them together as Reviews (WordPress.org Theme Review), and run them against themes, plugins, directories, single files, and even diffs.
This plugin is based on code from the Theme Check (written by Pross and Otto42) and Exploit Scanner (written by donncha) plugins.
- Upload the plugin folder to the
/wp-content/plugins/directory - Activate the plugin through the 'Plugins' menu in WordPress
- Tools > VIP Scanner
or
Install using the Plugin Installer.
0.5
- ClamAV Integration
- New checks, including VIPInitCheck, filter_input, WP_Widget_Tag_Cloud, and more!
- WP CLI Support (using vip-scanner command)
- Reducing false positives
- Adjusting severity of several checks
0.4
- UI Refresh
- Exports
- Auto scan
0.3
- Various bug fixes, including preventing the annoying upgrade nag between the main VIP Scanner plugin and WP.com Rules.
0.2
- New checks and scans! VIP_PregFile, EscapingCheck, etc.
- PHP 5.2 compatibility, props kevinmcgillivray and chrisguitarguy
- Bump WP version requirement (3.4)
- Code cleanup, props lance
0.1
- Initial version, using slightly older versions of the Theme Check plugin's checks.