How many vulnerabilities does Wordfence Security – Firewall, Malware Scan, and Login Security have?

The audit found 1314 findings: 0 critical, 49 high, 96 medium severity.

Wordfence Security – Firewall, Malware Scan, and Login Security

Q: Is Wordfence Security – Firewall, Malware Scan, and Login Security secure?

WP HealthKit's independent audit rates Wordfence Security – Firewall, Malware Scan, and Login Security overall risk as HIGH with a report-card grade of D.

Q: Should I use Wordfence Security – Firewall, Malware Scan, and Login Security?

Based on the latest audit (grade D, risk HIGH), review the 1314 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

v8.2.1WordPress Plugin5.0M+ installs4.7Audited 143 days ago

HIGH

Stable

Total Findings

1314

Security Grade

Active Installs

5.0M+

Coding Score

100/100

Security Findings

1314

Critical0

High49

Medium96

Low73

Info1096

Executive Summary

Is Wordfence Security – Firewall, Malware Scan, and Login Security secure? In WP HealthKit's independent 2026 audit, Wordfence Security – Firewall, Malware Scan, and Login Security received an overall risk of HIGH and a report-card grade of D across 1314 findings (0 critical, 49 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.1Declared minimum: 7.0Mismatch detected

Categories with Findings

Hardcoded SecretsPHP CompatibilityPlugin ConflictsMalware & Nulled PluginPerformanceInternationalizationDatabaseType Safety

Date	Version	Rating	Findings	Standards
6/1/2026Latest	v8.2.1	HIGH	1314	100/100
6/1/2026	v8.2.1	HIGH	1314	100/100
6/1/2026	v8.2.1	HIGH	1314	100/100
6/1/2026	v8.2.1

Plugin Info

Active Installs: 5.0M+
WP.org Rating: 4.7
Requires WP: 4.7+
Tested Up To: 7.0
Requires PHP: 7.0+
Audit Count: 4
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![Wordfence Security – Firewall, Malware Scan, and Login Security security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/wordfence)](https://wphealthkit.com/directory/wordfence)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.1Declared minimum: 7.0Mismatch detected

Categories with Findings

Hardcoded SecretsPHP CompatibilityPlugin ConflictsMalware & Nulled PluginPerformanceInternationalizationDatabaseType Safety

Wordfence Security – Firewall, Malware Scan, and Login Security

Security Findings

Executive Summary

Security Report Card

Readiness

PHP Compatibility

Categories with Findings

Audit History

Plugin Info

Categories

Embed Audit Badge

Are you the developer?

Audit Your Plugin

Readiness

PHP Compatibility

Categories with Findings

Audit History

Findings Over Time