WP Registry

WP Registry A WP-CLI plugin that checks your WordPress site against WP Registry, a public database of hashed WordPress plugins, themes, and files. Every component in the registry has been reviewed for vulnerabilities, malware, and maintenance status. Each entry is identified by a SHA-256 hash of its contents, so two sites running the same code share the same verdict. How it works 1. The plugin hashes your installed plugins, themes, and loose PHP files locally. 2. It looks up only those hashes against the registry and reports each one: clean, low, medium, high, critical, malware, update, in queue, or unaudited. 3. If your copy has been modified, the hash will not match a known build and the component is reported as unaudited rather than falsely marked clean. 4. Anything still unaudited can be uploaded for review with wp registry upload. Only content hashes leave your site for a check — sent as short, shared prefixes (see Privacy). No file contents, site URL, or user data. Uploading a build sends that one build's code for review. Install Usage Survey this site Filter by type Append each component's key issue Machine-readable output Inspect one component Show every record