WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
Detection looks at response headers, meta tags, script sources, javascript globals, dom selectors, html markup, inline scripts across 17 fingerprint rules among the site's public responses.
01
Websites using WordPress
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying WordPress. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Meta tags
- Script sources
- JavaScript globals
- DOM selectors
- HTML markup
- Inline scripts
03
Example public indicators for WordPress
Illustrative indicators derived from public catalog metadata for WordPress. A live scan may match additional proprietary rules beyond these examples.
- x-pingback: /xmlrpc.php
- link: rel="https://api.w.org/"
- generator: WordPress ?
- wp-contentincludes/
- wp-embed.min.js
- wp-static.assets.sh/
- wp.ajax
- wp.receiveEmbedMessage
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known WordPress signature (17 rules) at the time of the scan.
- Does not establish
- A sitewide install of WordPress, an active vendor contract, exclusive use, or that WordPress is still in place today.
05
How to check a site for WordPress
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest WordPress signals.
- 2. PluginView reads only public responses (response headers, meta tags, script sources) and scores them against the WordPress signature set (17 rules).
- 3. Review the confidence score and text explanation for WordPress on the results page.
06
Commonly implies
07
FAQ: detecting WordPress
- Can PluginView detect WordPress without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for WordPress — typically response headers, meta tags, script sources, javascript globals. It does not bypass authentication or paywalls.
- What category is WordPress?
- WordPress is classified under CMS, Blogs in the PluginView directory.
- How many fingerprint rules cover WordPress?
- This reference currently tracks 17 fingerprint rules across response headers, meta tags, script sources, javascript globals, dom selectors, html markup, inline scripts. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses WordPress?
- Illustrative public indicators for WordPress include x-pingback: /xmlrpc.php; link: rel="https://api.w.org/"; generator: WordPress ?. A live scan may match additional proprietary rules beyond these examples.
