Weio Site Check (WordPress plugin)

Free, read-only health check for a WordPress site, with plain-English explanations and do-it-yourself fixes.

Download: the latest zip is on the Releases page. Install it from Plugins > Add New > Upload Plugin, then open Tools > Site Check. The plugin has been submitted to the WordPress.org Plugin Directory and is waiting for review.

The checks

1. HTTPS in WordPress settings
2. http to https redirect (301/308)
3. SSL certificate: days to expiry, hostname match, trust chain
4. Optional outside-in HTTPS check from the public internet (off by default; sends only your domain to weio.ai)
5. Mixed content on the homepage
6. WordPress core files against the official WordPress.org checksums
7. PHP files in the uploads folder
8. Spam and cloaking signs: spam shown only to a Googlebot user agent, Google-referrer-only redirects, the Japanese keyword hack, sitemap spam, spam post titles
9. Administrator accounts created in the last 30 days
10. WooCommerce: cart/checkout/account pages, guest checkout over https, an enabled payment method
11. Homepage response time and size

Optional daily monitoring emails the site admin only when a check newly becomes a problem.

It does not remove malware and is not a firewall. A pass is not a guarantee; a warning is not proof of a hack. Full details, privacy and the external-services disclosure are in readme.txt.

Need it fixed?

The results page links to optional fixed-price services from Weio (https://weio.ai): HTTPS/certificate fixes, hacked-site cleanup and WordPress speed work. The plugin itself is free and complete without them.

License

GPLv2 or later. Made by Weio. Weio is run largely by AI operators; a person at Weio is responsible for what we ship.