WordPress Version & Plugin Checker
Check if your WordPress website and its plugins are running the latest versions or not. Out of date software can leave your site vulnerable to security threats. This tool is completely free.
WordPress Version & Plugin Checker
Enter your website address to see which version of WordPress it runs, and how far behind the latest release it is. No email required — we only read what your site already publishes.
This tool reads only the pages your website already serves to the public — the same information any visitor can see in their browser. It makes a handful of requests and caches the result, so it will not put load on your site.
Out of date WordPress is how sites get hacked
If the checker flagged an outdated WordPress version or a backlog of plugin updates, take it seriously. Most compromised WordPress sites are breached through software that had a patch available months earlier.
Auto-updates help, but they fail silently, ignore premium plugins, and won’t tell you when a theme has been abandoned by its developer.
Our WordPress maintenance plans close that gap. Real developers keep your core, plugins and themes up to date, verify that every update actually applied, and test that nothing broke.
Your website should never be the thing you’re worrying about at 9pm on a Friday.
Updates, applied and verified
Core, plugin and theme updates on a schedule, tested after every run. Not left to auto-update and hope.
24/7 monitoring
Server-side uptime and security monitoring, so someone is always in the loop.
Real human support
Every maintenance plan includes dedicated technical help from developers who know your site personally.
Want your next check to come back green?
Get in touch with us via the contact form, or on 01454 804 039.
How to check a WordPress site’s version by hand
The checker above does this for you, but if you’d rather look yourself, there are a few places WordPress tends to give its version away. Well-run sites often hide some of them, and that’s fine.
Your dashboard
If it’s your own site, log in and look at the bottom right of any admin screen, or go to Dashboard, then Updates. It’s the only completely reliable answer.
The page source
View the source of the homepage and search for generator. Many sites still print a tag like <meta name="generator" content="WordPress 7.1.3">.
The RSS feed
Add /feed/ to the address and look for the <generator> line near the top.
Stylesheet and script versions
Files under /wp-includes/ often end in ?ver= followed by the WordPress version. Caching and security plugins rewrite these, so treat them as a hint rather than proof.
If none of those work, the site is hiding its version, which is a sensible default. It doesn’t tell you whether the site is actually up to date, though, and that’s the part that matters.
What the version number tells you
WordPress versions have three parts. In 7.1.3, 7.1 is the major release and the 3 is a maintenance or security release.
7.1.3
The major release
Major releases bring new features a few times a year.
7.1.3
A maintenance or security release
The small ones fix bugs and security holes, and since WordPress 3.7 they install automatically unless someone has switched that off.
WordPress.org publishes a status for every release: latest, outdated or insecure. The newest release on each recent branch still gets security fixes, so in October 2026 a site on 7.0.7 was behind but patched, while one on 7.0.6 was marked insecure. The checker uses that same list, so its answer matches the one WordPress.org would give.
- Latest
- Outdated
- Insecure
Is your site at risk?
An old core version gets the headlines, but plugins are where most WordPress sites actually get broken into. The checker lists every plugin it can detect and flags any that wordpress.org has closed, which often happens because of a security issue, and any that haven’t had a release in two years.
Update WordPress core first
Take a backup, then update to the latest release. If you’re several major versions behind, test on a copy of the site before you touch the live one.
Then the plugins
Update them one at a time and check the site after each one. Replace any plugin that’s been closed or abandoned rather than waiting for a fix that may never come.
Check your PHP version too
Your host controls it. PHP 8.2 stops receiving security fixes on 31 December 2026, so if your site still runs on it, ask your host about moving to PHP 8.3 or newer.
Don’t rely on auto-updates alone
They can fail silently, they skip most premium plugins, and they won’t tell you when an update has broken something.
We write up the WordPress security releases that matter, including wp2shell and WordPress 7.0.4, and we’ve explained how charity websites get hacked and what the cleanup costs.
Questions about the checker
If your question isn’t here, email [email protected] or book a 30 minute discovery call.
Is it safe to show my WordPress version?
Hiding it won’t stop an attack, because automated tools try known exploits whatever version a site shows. Being up to date is what protects you. Hiding the version mostly stops casual lookups like this one.
Why does the checker say my version is unknown?
Your site is hiding the usual signals, often through a security or caching plugin. We only report a version we can confirm, so we’d rather say unknown than guess.
Can it check sites that aren't WordPress?
It will tell you if a site isn’t WordPress and, where it can, which platform it uses, such as Shopify or Wix. It can’t check versions for other platforms.
How often should I check my site?
Monthly is plenty for most charities, plus straight after a WordPress security release makes the news.