VulnCue - Real CVE data for your WordPress plugins, plus built-in 2FA

by•
VulnCue scans your WordPress plugins and themes against real CVE and NVD vulnerability data — no agent or code running on your server. Get a clear risk score and plain-language explanations instead of cryptic CVE jargon, plus built-in two-factor authentication to lock down your login. Start free with monthly scans on one site, or upgrade for continuous monitoring, PDF reports, and white-label plans built for agencies managing multiple WordPress sites for clients.

Add a comment

Replies

Best
Maker
📌
Hey Product Hunt 👋 We built VulnCue because WordPress never actually tells you “hey, this exact plugin version has a known CVE” — you either dig through changelogs yourself or find out the hard way. So we built a tool that cross-references your actual installed plugins and themes against real vulnerability databases (NVD, OpenCVE), scores your risk, and explains what’s wrong in plain language instead of CVE-speak. We also just shipped our own built-in 2FA for the companion WordPress plugin — no extra service, no extra account, just turn it on. Free tier scans one site monthly, no agent or code running on your server for the web checks. Would love your feedback, especially if you manage WordPress sites for clients — what would make this actually useful for your workflow?