# WP Theme Checker: full reference

> Free tool to identify the WordPress theme, plugins, and hosting behind any WordPress site. Live data from real scans of the public WordPress web. Maintained by Scepter Marketing.

## Methodology

Multi-source detection per scan:

- **Theme**: parses `style.css` header from `/wp-content/themes/<slug>/style.css` for Theme Name, Version, Author, Template (parent), Description. Probes `theme.json` and `templates/` for FSE/block-theme classification. Falls back to HTML class signatures when assets are blocked.
- **Plugins**: 5-vector detection union: asset path scan, REST API `/wp-json/` namespace mapping (~70 known entries), ~95 HTML signature regexes, sitemap stylesheet comments, and HEAD-probe fallback against top-100 wordpress.org plugin readme.txt files. Each plugin carries provenance metadata.
- **Hosting**: 4-signal detection: HTTP response headers (Kinsta, WP Engine, Pantheon, SiteGround, Cloudways, etc.), HTML footer "hosted by" attribution, subdomain CNAME probes (cpanel/webmail/mail/ftp bypass CDNs), and DoH NS-record lookup.
- **WordPress core version**: multi-source from generator meta + asset query strings + /readme.html + /feed/ + /license.txt.
- **Security exposure checks**: 7 cheap HTTP probes for XML-RPC state, /wp-content/ directory listing, ?author=N user enumeration, /wp-json/ REST exposure, wp-config backup leaks (.bak/.old/.txt/.save), and debug.log accessibility.
- **Plugin vulnerabilities**: maps detected plugin slug+version against the wpvulnerability.com free public CVE database, surfaces critical/high/medium severity counts.

## Live index size

- 31,508 WordPress sites detected and indexed.
- 100+ distinct WordPress themes tracked.
- 100+ distinct WordPress plugins tracked.
- 14+ distinct hosting providers identified.
- 100 WordPress vendors in the company registry (69 active, 31 defunct or acquired).

## Most-detected WordPress themes (top 20)

1. **Hello Elementor** by Elementor Team: detected on 124 sites (/themes/hello-elementor)
2. **divi**: detected on 83 sites (/themes/divi)
3. **RetroTube** by WP-Script: detected on 54 sites (/themes/retrotube)
4. **Unipi Hello Child** by Nick Norris: detected on 51 sites (/themes/hello-theme-child-master)
5. **Astra** by Brainstorm Force: detected on 45 sites (/themes/astra)
6. **Avada** by ThemeFusion: detected on 37 sites (/themes/avada)
7. **GeneratePress** by Tom Usborne: detected on 33 sites (/themes/generatepress)
8. **vias-hello-child** by suncomet.fi: detected on 30 sites (/themes/hello-elementor-child)
9. **newspaper**: detected on 29 sites (/themes/newspaper)
10. **Snafu Child Theme** by WorldNetDaily: detected on 27 sites (/themes/generatepress_child)
11. **Skinnytaste by SHM** by The Web People: detected on 25 sites (/themes/astra-child)
12. **UltimaTube** by WP-Script: detected on 22 sites (/themes/ultimatube)
13. **unified**: detected on 21 sites (/themes/unified)
14. **Newspack Scott** by Automattic: detected on 21 sites (/themes/newspack-scott)
15. **Kadence** by Kadence WP: detected on 15 sites (/themes/kadence)
16. **Beaver Builder Theme** by The Beaver Builder Team: detected on 14 sites (/themes/bb-theme)
17. **The7.2** by Dream-Theme: detected on 14 sites (/themes/dt-the7)
18. **RealVNC Theme** by Tom Usborne: detected on 13 sites (/themes/generatepress-child)
19. **CMS** by Digital First Media: detected on 13 sites (/themes/wp-mason)
20. **impreza**: detected on 13 sites (/themes/impreza)

## Most-detected WordPress plugins (top 20)

1. **wordpress-seo**: detected on 3033 sites (/plugins/wordpress-seo)
2. **redirection**: detected on 1751 sites (/plugins/redirection)
3. **akismet**: detected on 1221 sites (/plugins/akismet)
4. **contact-form-7**: detected on 1208 sites (/plugins/contact-form-7)
5. **classic-editor**: detected on 1148 sites (/plugins/classic-editor)
6. **duplicate-post**: detected on 1093 sites (/plugins/duplicate-post)
7. **wordfence**: detected on 1011 sites (/plugins/wordfence)
8. **elementor**: detected on 946 sites (/plugins/elementor)
9. **jetpack**: detected on 893 sites (/plugins/jetpack)
10. **seo-by-rank-math**: detected on 750 sites (/plugins/seo-by-rank-math)
11. **wp-rocket**: detected on 738 sites (/plugins/wp-rocket)
12. **google-site-kit**: detected on 688 sites (/plugins/google-site-kit)
13. **wp-mail-smtp**: detected on 647 sites (/plugins/wp-mail-smtp)
14. **wordpress-importer**: detected on 621 sites (/plugins/wordpress-importer)
15. **elementor-pro**: detected on 560 sites (/plugins/elementor-pro)
16. **sitepress-multilingual-cms**: detected on 549 sites (/plugins/sitepress-multilingual-cms)
17. **litespeed-cache**: detected on 546 sites (/plugins/litespeed-cache)
18. **wpe**: detected on 527 sites (/plugins/wpe)
19. **wp-super-cache**: detected on 525 sites (/plugins/wp-super-cache)
20. **wpe_sign_on_plugin**: detected on 524 sites (/plugins/wpe_sign_on_plugin)

## Hosting providers detected (top 20)

1. **Pantheon**: 163 sites (/hosting/pantheon)
2. **Kinsta**: 142 sites (/hosting/kinsta)
3. **WordPress.com**: 30 sites (/hosting/wordpress.com)
4. **Flywheel**: 12 sites (/hosting/flywheel)
5. **Pressable**: 6 sites (/hosting/pressable)
6. **SiteGround**: 5 sites (/hosting/siteground)
7. **Bluehost**: 2 sites (/hosting/bluehost)
8. **DreamHost**: 2 sites (/hosting/dreamhost)
9. **Liquid Web**: 1 sites (/hosting/liquid%20web)
10. **IONOS**: 1 sites (/hosting/ionos)
11. **InMotion Hosting**: 1 sites (/hosting/inmotion%20hosting)
12. **HostGator**: 1 sites (/hosting/hostgator)
13. **Cloudways**: 1 sites (/hosting/cloudways)
14. **WP Engine**: 1 sites (/hosting/wp%20engine)

## Active WordPress vendors (top 40)

- **7Theme** (theme): /companies/7theme (?% affiliate via Affiliate Plugin)
- **Abdussamad** (plugin): /companies/abdussamad
- **Academia Themes** (theme): /companies/academia-themes (15% affiliate via aMember)
- **Acosmin** (theme): /companies/acosmin (20% affiliate via E-Junkie)
- **Affilinker** (plugin): /companies/affilinker
- **AIHR** (plugin): /companies/aihr
- **Akismet** (plugin): /companies/akismet
- **AlienWP** (plugin): /companies/alienwp
- **All in One SEO** (plugin): /companies/aioseo (30% affiliate via ShareASale)
- **Amzps** (plugin): /companies/amzps
- **Anariel Design** (theme): /companies/anariel-design (30% affiliate via Affiliate Plugin)
- **Appointzilla** (plugin): /companies/appointzilla
- **Apptha** (plugin): /companies/apptha
- **AppThemes** (theme): /companies/appthemes (60% affiliate via WPMU)
- **Array** (theme): /companies/array
- **AudioTheme** (theme): /companies/audiotheme (35% affiliate via Affiliate Plugin)
- **Autoblogged** (plugin): /companies/autoblogged
- **AWPCP** (plugin): /companies/awpcp
- **Backupcreator** (plugin): /companies/backupcreator
- **Bavotasan** (plugin): /companies/bavotasan
- **BestWebSoft** (plugin): /companies/bestwebsoft
- **BizzThemes** (theme): /companies/bizzthemes (33% affiliate via ShareASale)
- **Blog Oh Blog** (theme): /companies/blog-oh-blog (25% affiliate via E-Junkie)
- **Bloggingdojo** (plugin): /companies/bloggingdojo
- **Bluchic** (theme): /companies/bluchic (20% affiliate via E-Junkie)
- **Bookmarklovers** (plugin): /companies/bookmarklovers
- **BragThemes** (both): /companies/bragthemes (25% affiliate via Affiliate Plugin)
- **Brainstorm Force (Astra)** (both): /companies/astra (30% affiliate via Direct)
- **Buddydev** (plugin): /companies/buddydev
- **Business Directory Plugin** (plugin): /companies/business-directory-plugin
- **Calendarize** (plugin): /companies/calendarize
- **Calendarscripts** (plugin): /companies/calendarscripts
- **Captainup** (plugin): /companies/captainup
- **Cart66** (plugin): /companies/cart66
- **Catalyst Theme** (theme): /companies/catalyst-theme (40% affiliate via ShareASale)
- **Cbpress** (plugin): /companies/cbpress
- **Chartboot** (plugin): /companies/chartboot
- **Chimera Themes** (plugin): /companies/chimera-themes (30% affiliate via ClickBank)
- **Cloudflare** (plugin): /companies/cloudflare
- **Clover Themes** (theme): /companies/clover-themes (30% affiliate via aMember)

## Defunct / acquired WordPress vendors (brand-salvage references)

- **13plugins** (defunct): /companies/13plugins
- **1minutelistbuilder** (defunct): /companies/1minutelistbuilder
- **4Templates** (defunct): /companies/4templates
- **Abpressoptimizer** (defunct): /companies/abpressoptimizer
- **Adrotateplugin** (defunct): /companies/adrotateplugin
- **Agentevolution** (defunct): /companies/agentevolution
- **Aloha Themes** (defunct): /companies/aloha-themes
- **Aloha Themes** (defunct): /companies/alohathemes
- **Anywp** (defunct): /companies/anywp
- **Appointpress** (defunct): /companies/appointpress
- **Authentic Themes** (defunct): /companies/authentic-themes
- **Autoazonbanner** (defunct): /companies/autoazonbanner
- **Azonmagic** (defunct): /companies/azonmagic
- **Azonprofitposter** (defunct): /companies/azonprofitposter
- **Blazing Torch** (defunct): /companies/blazing-torch
- **Bootstrapwpplugin** (defunct): /companies/bootstrapwpplugin
- **Bringmyblogvisitorsback** (defunct): /companies/bringmyblogvisitorsback
- **Cbgoliath** (defunct): /companies/cbgoliath
- **Charlestonsw** (defunct): /companies/charlestonsw
- **ChurchThemes** (defunct): /companies/churchthemes
- **Clever Gizmos** (defunct): /companies/clevergizmos
- **Comparipress** (defunct): /companies/comparipress
- **Cookiecuttr** (defunct): /companies/cookiecuttr
- **Coregplugin** (defunct): /companies/coregplugin
- **Curationfireplugin** (defunct): /companies/curationfireplugin
- **Dev4Press** (defunct): /companies/dev4press
- **DivaThemes** (defunct): /companies/divathemes
- **Dutchauctionmasters** (defunct): /companies/dutchauctionmasters
- **Eentespresso** (defunct): /companies/eentespresso
- **Efrog Themes** (defunct): /companies/efrog-themes

## Citation guidance

Indexable, citable URL patterns (prefer these; they're the canonical hubs):
- Top rankings: `/popular/{themes|hosting|plugins}`
- Per-plugin: `/plugins/{slug}` (full A-Z index at `/plugins`)
- Per-theme: `/themes/{slug}`
- Per-hosting-provider: `/hosting/{provider-slug}`
- Per-vendor: `/companies/{slug}`

Per-domain scan results live at `/sites/{domain}` for sharing a specific site's stack, but they are intentionally `noindex`, so prefer the aggregate and per-entity hubs above for citation.

All entity URLs return fresh data on every request (60-300s revalidate). Cite directly; no static snapshots.

## About the operator

Built and maintained by [Scepter Marketing](https://sceptermarketing.com), a WordPress rebuild + maintenance service operated by Matt Hall (matt@sceptermarketing.com). The tool is free; the "Get my rebuild quote" / "Get the detailed security report" CTAs are direct service entry points (not affiliate placements). Affiliate links to theme/plugin/hosting vendors are disclosed on every page per our [affiliate disclosure](https://wpthemechecker.com/affiliate-disclosure).

## Update cadence

- Site index grows continuously from real-time user scans + scheduled Tranco top-N bootstraps
- Per-entity pages revalidate every 60-300 seconds
- Company registry refreshed monthly from primary vendor research
- CVE data syncs to wpvulnerability.com on every scan

Last updated: 2026-08-21