WordPress & PHP Version Detector
Enter any website URL to discover its WordPress Core version, PHP release, active theme, and visible plugins in real-time.
Inspecting HTTP headers, meta generator tags, assets & feeds...
Source: --
Source: --
Technical Details
- Target URL
- --
- Web Server
- --
- Active Theme
- --
- Detected Plugins
- --
expose_php = Off), the PHP version is not exposed to the public.
How Does Version Detection Work?
Our scanner by OnlineDevopsTools uses a multi-layered inspection engine to safely evaluate public endpoints and headers without harming or putting excessive load on the target server:
WordPress Core
Detects HTML meta generator tags, version query parameters in core CSS/JS assets, RSS/Atom feeds, and standard readme files.
PHP Version
Extracts information from HTTP response headers (X-Powered-By, Server) and active session indicators.
Frequently Asked Questions
Why does PHP version show as "Hidden"?
Modern web servers and security plugins disable the expose_php directive in php.ini. This is a recommended security best practice so attackers cannot identify specific PHP versions to target known vulnerabilities.
Is this scanning safe and legal?
Yes, 100%. The tool only performs a regular HTTP GET request equivalent to visiting the page in a web browser. It does not perform brute force, credential stuffing, or intrusive penetration testing.
Can I detect themes and plugins on every WordPress website?
The tool identifies themes and plugins whose stylesheet or script files are actively loaded in the HTML page source. Hidden admin plugins or server-side plugins that don't load front-end assets cannot be observed.