MBR Bulk WP Detector
MBR Bulk WP Detector is a powerful tool designed for agencies, marketers, developers, and freelancers who need to quickly identify which websites are running WordPress. Upload hundreds or thousands of URLs and get instant results with detailed insights about themes, plugins, and versions.
by Robert Palmer · github.com/harbourbob/mbr-bulk-wp-detector · website
Install
The author publishes release zips, so WP-CLI can install straight from GitHub:
wp plugin install https://github.com/harbourbob/mbr-bulk-wp-detector/releases/download/v2.4.1/mbr-bulk-wp-detector-2.4.1.zipReadme
MBR Bulk WP Detector
Transform your lead qualification process with bulk WordPress detection!
A powerful WordPress plugin designed for agencies, marketers, developers, and freelancers who need to quickly identify which websites are running WordPress. Upload hundreds or thousands of URLs and get instant results with detailed insights about themes, plugins, widgets, and versions.
🎯 Perfect For
- Marketing Agencies - Build qualified prospect lists for WordPress-focused campaigns
- Web Developers - Find potential clients who need plugin/theme services
- Freelancers - Identify WordPress sites for targeted outreach
- SEO Professionals - Discover partnership opportunities with WordPress sites
- Lead Generation - Qualify leads from any source (ChatGPT, scraping tools, etc.)
✨ Key Features
Detection Capabilities
- 6 Detection Methods: REST API, link headers, HTML markers, login pages, XML-RPC, robots.txt
- Deep Scan Mode: Detect WordPress version, themes, plugins, and widgets
- Widget Detection: Classic sidebar widgets, Gutenberg blocks, and widgets from the six major page builders (Elementor, Bricks, Beaver Builder, Divi, WPBakery, Oxygen)
- Inner Page Scanning (optional): Extend deep scan to the site's about and blog pages for broader widget and plugin coverage
- Company Information: Poll company name, email address and phone number
- Confidence Scoring: High/Medium/Low accuracy indicators
- 99%+ Accuracy: Smart algorithms with multi-method verification
Bulk Operations
- ✅ Unlimited URL Checking - No artificial limits
- 📁 CSV/TXT Upload - Import large URL lists easily
- 📋 Paste URLs - Line-by-line or comma-separated
- 💾 Save & Load Lists - Manage multiple campaigns
- 🔄 Auto Duplicate Removal - Clean your lists automatically
- 🌐 TLD Filtering - Filter by .com, .org, .edu, etc.
Performance & Speed
- ⚡ Concurrent Processing: 1-20 simultaneous checks
- 🗄️ Smart Caching: 7-day retention, 24x faster on repeat checks
- 📊 Real-time Progress: Live tracking with time estimates
- ⏱️ Configurable Delays: Adjust request timing
Results Management
- 🔍 Filter Results: All/WordPress/Not WP/Inconclusive
- 📊 Sortable Columns: URL, status, confidence, cache age
- 🧩 Dedicated Widgets Column: Grouped by source with collapsible counts
- 📋 Copy to Clipboard: WordPress URLs instantly
- 📤 Export: CSV or JSON formats (including widgets and scanned pages data)
- 📈 Statistics Dashboard: Visual metrics and insights
- 🗃️ Historical Tracking: Database storage for all checks
🚀 Why Choose This Plugin?
vs. Online Checkers
| Feature | MBR Bulk WP Detector | Online Services |
|---|---|---|
| Price | FREE | $29-99/month |
| URL Limit | Unlimited | 10-100 URLs |
| Privacy | 100% Private | Data collection |
| Deep Scanning | ✅ Included | ❌ Rarely offered |
| Widget Detection | ✅ Included (8 sources) | ❌ Not offered |
| Multi-Page Scanning | ✅ Optional | ❌ Not offered |
| Bulk Import | ✅ CSV support | Limited |
| Saved Lists | ✅ Multiple campaigns | Usually not included |
| Subscription | ❌ One-time install | ✅ Required |
Performance Gains
- 100 URLs (First Check): 4 min → 2 min (2x faster)
- 100 URLs (Cached): 4 min → 10 sec (24x faster)
- Single Cached URL: Instant (0.1 seconds)
📦 Installation
Automatic Installation
- Log in to your WordPress admin panel
- Go to Plugins → Add New
- Search for "MBR Bulk WP Detector"
- Click Install Now and then Activate
- Navigate to Settings → WP Platform Checker
- Start checking websites!
Manual Installation
- Download the plugin ZIP file from this repository
- Log in to your WordPress admin panel
- Go to Plugins → Add New → Upload Plugin
- Choose the ZIP file and click Install Now
- Activate the plugin
- Navigate to Settings → WP Platform Checker
Quick Start
- Go to Settings → WP Platform Checker
- Paste 5-10 test URLs (try: wordpress.org, google.com, facebook.com)
- Enable the Deep scan checkbox
- (Optional) Enable Also scan inner pages for broader widget coverage
- Click Check Websites
- Review the results and explore the features!
💡 Real-World Use Cases
Lead Qualification
Upload 500 prospect URLs, get WordPress sites identified in 2 minutes instead of checking each manually.
Competitor Analysis
Check 100 competitors, export the themes, plugins, and widgets they're using for market research.
Personalised Outreach
Detect themes, plugins, and specific page builder widgets to craft targeted pitches — "I noticed you're using Elementor with a custom team member widget..." lands better than generic outreach.
Builder Market Research
Quickly survey which page builders dominate a vertical or geography by scanning a list of sites and summarising the widget source breakdown.
Monthly Re-checks
Load saved URL lists and get instant results from cache - no re-checking needed.
Client Reporting
Export comprehensive CSV reports with full detection data and statistics.
🔧 Technical Details
Detection Methods
- REST API Endpoint Check - Fastest and most reliable method
- Link Header Analysis - Checks for wp-json headers
- HTML Content Markers - Scans for wp-content, wp-includes
- Login Page Detection - Identifies WordPress login patterns
- XML-RPC Verification - Checks for WordPress XML-RPC endpoint
- Robots.txt Matching - Analyses robots.txt patterns
Deep Scan Capabilities
When deep scan is enabled, the plugin detects:
- WordPress version number
- Active theme name
- Top 10 installed plugins
- Widgets in use, grouped by source:
- Classic sidebar widgets (Search, Recent Posts, Categories, Nav Menu, etc.)
- Blocks — Gutenberg core blocks and third-party namespaced blocks (e.g.
kadence/rowlayout) - Elementor — uses the
data-widget_typeattribute for highest accuracy - Bricks — element types extracted from
brxe-classes (element IDs filtered out) - Beaver Builder — module types from
fl-module-classes - Divi — module types from
et_pb_classes (structural classes filtered out) - WPBakery / Visual Composer — shortcode types from
vc_classes (timestamp IDs and grid classes filtered out) - Oxygen — element types from
ct-classes
- Generator meta tags
- Company name (always) and email/phone (when harvesting is enabled)
Inner Page Scanning
An opt-in extension to deep scan that fetches up to two additional pages per site — the about page and the blog/news page — to build a more complete picture of widget and plugin usage. This is particularly useful because classic sidebar widgets typically only render on blog/archive pages, not static homepages.
- Nav-based discovery: Parses the homepage navigation for links matching about/blog patterns (supports variants: about-us, news, articles, journal, insights, posts)
- Same-host only: Off-site links are ignored
- No speculative probing: If the homepage doesn't expose these pages, they're skipped — zero wasted requests
- Cost-bounded: At most two extra HTTP requests per site
- Merge logic: Widgets are unioned per source, plugins summed by frequency across pages, theme and version keep the homepage value
- Transparency: The
scanned_pagesarray in the JSON export shows which pages contributed
System Requirements
- WordPress 5.0 or higher
- PHP 7.2 or higher
- cURL enabled
- file_get_contents enabled
- Basic server resources (standard shared hosting works fine)
📊 Performance Benchmarks
| URLs | First Check | Cached Check |
|---|---|---|
| 10 URLs | ~5 seconds | <1 second |
| 100 URLs | ~2 minutes | ~10 seconds |
| 500 URLs | ~8 minutes | ~30 seconds |
| 1000 URLs | ~15 minutes | ~60 seconds |
Times vary based on concurrency settings and server resources. Inner page scanning adds at most 2 extra HTTP requests per site when enabled.
🔒 Security & Privacy
This plugin is designed with security and privacy as top priorities:
- ✅ 100% Private - No external API calls
- ✅ Server-side Processing - All checks happen on your server
- ✅ Private IP Blocking - Security protection
- ✅ WordPress Nonces - Proper security implementation
- ✅ Input Sanitisation - Full sanitisation of all inputs
- ✅ Capability Checks - Proper permission verification
What This Plugin Does NOT Do
- ❌ Collect any user data
- ❌ Make external API calls
- ❌ Track usage statistics
- ❌ Phone home to any servers
- ❌ Share information with third parties
All data stays on your WordPress installation.
📖 Documentation
Full documentation is included with the plugin installation, covering:
- Quick start guide
- Feature explanations
- Optimal settings recommendations
- Troubleshooting tips
- Performance optimisation
- Best practices
🎨 Screenshots
The plugin features a modern, professional interface:
- Two-column layout for easy workflow
- Color-coded status badges for quick identification
- Dedicated Widgets column with collapsible per-source groups
- Mobile-responsive design
- Real-time progress tracking
- Visual statistics dashboard
🔄 Changelog
Version 2.4.1 - Widget Detection Fixes (Latest Release)
- Bricks: Filter out 6-character hex element IDs that were polluting widget results (e.g.
71510a,bdb11b,5349b0). Bricks tags every element with both a widget-type class and a unique-ID class — previously both were reported - WPBakery: Filter out auto-generated timestamp IDs (e.g.
custom_1749109182801), Bootstrap 2 grid classes (span1–span12), and utility classes (responsive,hidden,shortcodes, etc.) - Cache: Scan options are now included in the cache key. Toggling deep scan / inner pages / harvest contacts and re-running no longer returns stale results from a previous option set
Version 2.4.0 - Inner Page Scanning
- New opt-in "Also scan inner pages" option extends deep scan to the site's about and blog pages for broader widget and plugin coverage
- Nav-based page discovery: finds about/blog links in the homepage navigation (no speculative path probing, zero wasted requests on sites without these pages)
- Supports variants: about-us, news, articles, journal, insights, posts — matched by anchor text OR URL path
- Multi-page merging: widgets unioned per source, plugins summed by frequency then ranked, theme and version from homepage
- Particularly useful for catching classic sidebar widgets that only render on blog/archive pages
- Cost-bounded: at most two extra HTTP requests per site
- New
scanned_pagesfield in JSON export for transparency on which pages contributed
Version 2.3.0 - Widget Detection
- New dedicated Widgets column in the results table
- Detects three categories of widgets across eight sources:
- Classic sidebar widgets (Search, Recent Posts, Categories, Nav Menu, Text, Block, etc.)
- Gutenberg blocks (core blocks plus third-party namespaced blocks like
kadence/rowlayout) - Page builder widgets for Elementor, Bricks, Beaver Builder, Divi, WPBakery, and Oxygen
- Signature-gated per builder to reduce false positives from unrelated CSS classes
- Structural/grid classes filtered out so only real widget types are reported
- Widgets included in CSV exports (single column, pipe-separated by source) and JSON exports (structured object)
- Zero extra HTTP requests — reuses the homepage HTML already fetched for theme and plugin detection
- Automatic database migration adds the
widgetscolumn to the history table
Version 2.2.0
- Added phone & email harvesting capabilities
Version 2.0.0 - Major Update
New Features (16)
- Deep scan mode (detect themes, plugins, WP versions)
- Smart caching system (7-day retention, 24x faster)
- Save/load URL lists for campaigns
- CSV/TXT file upload support
- JSON export option
- Statistics dashboard with visual cards
- Result filtering (All/WordPress/Not WP/Inconclusive)
- Sortable table columns
- URL validation tool
- Automatic duplicate removal
- TLD filtering
- Historical tracking database
- Copy WordPress URLs to clipboard
- Keyboard shortcuts (Ctrl+Enter)
- Concurrency control (1-20 requests)
- Request delay option
Improvements (20+)
- Added 2 new detection methods (XML-RPC, robots.txt)
- Complete UI redesign with professional two-column layout
- Color-coded status badges
- Enhanced security
- Private IP blocking
- Mobile-responsive design
- Real-time progress tracking
- Better error handling
- Improved timeout management
- Cache management interface
- PHPDoc comments throughout
- Comprehensive documentation
Performance Improvements
- 2x faster URL checking with concurrent requests
- 24x faster with cached results
- Reduced memory usage for large lists
- Optimised database operations
Version 1.5.2
- Initial public release
- Basic WordPress detection
- Simple bulk checking interface
- CSV export functionality
Read the full README on GitHub →
Releases
| Tag | Published | Asset | Downloads |
|---|---|---|---|
| v2.4.1 | Aug 7, 2026 | mbr-bulk-wp-detector-2.4.1.zip | 0 |
| v2.2.0 | Mar 13, 2026 | mbr-bulk-wp-detector-2.2.0.zip | 2 |
| v2.1.0 | Feb 16, 2026 | mbr-bulk-wp-detector-2.1.0.zip | 7 |
Active-site estimate ≈10 comes from the median of recent superseded releases. Method.