WP Manifestindependent plugin directory
manifest / security / cra-scanner-wp

CRA Scanner

WordPress plugin that scans your active plugins for EU Cyber Resilience Act (CRA) compliance issues before the September 2026 deadline.

by gritzon · github.com/gritzon/cra-scanner-wp · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/gritzon/cra-scanner-wp/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/gritzon/cra-scanner-wp ↗

Submitted to WordPress.org Plugin Directory — pending review

A free WordPress plugin that helps site owners and developers prepare for the EU Cyber Resilience Act (CRA) deadline — September 11, 2026.

What it does

  • Scans all active plugins on your WordPress site
  • Checks for outdated plugins (not updated in 6 or 12+ months)
  • Detects missing PHP version requirements
  • Shows a clear ✓ OK / ⚠ Warning / ✗ Risk status for each plugin
  • Displays a summary of how many plugins need attention

Why it matters

After September 11, 2026, the EU Cyber Resilience Act requires WordPress plugin developers to follow formal vulnerability handling procedures. Fines reach up to €15 million or 2.5% of global annual turnover.

Installation

  1. Download the zip
  2. Go to Plugins → Add New → Upload Plugin
  3. Activate and find CRA Scanner in your admin menu

Requirements

  • WordPress 5.8+
  • PHP 7.4+

Author

gritzon