Log in Sign up

Free tool

What does this site run, and is it outdated?

Enter a domain or URL. We open the page as a browser would and read the software it shows in its response headers and HTML.

No account needed. Also as a JSON API

Live check of uptime.rs

Nothing outdated found on uptime.rs

Web server
nginx
Checked
4 minutes ago

What it checks

Web server and PHP

nginx, Apache, LiteSpeed, IIS or Caddy and the PHP version, when the server sends them in its headers.

CMS, shop and plugins

WordPress, Joomla, Drupal, Shopify, Magento, WooCommerce, Elementor and more, with the version where the page shows it.

Known vulnerabilities

CVEs that affect the exact PHP, Apache, nginx or WordPress version, with the worst severity and the version that fixes them.

End of support

PHP that no longer gets security fixes, or soon won't, an old WordPress and jQuery older than 3.5.

Questions

Why is a version missing?

Many servers hide their version numbers, which is good practice. We only report what the site itself shows.

My server is Ubuntu or Debian. Is it really vulnerable?

Not always. Ubuntu, Debian and Red Hat backport security fixes without changing the version number, so the list is a hint there; check that the system packages are up to date.

Where does the vulnerability data come from?

From wpvulnerability.net, which collects CVEs for PHP, Apache, nginx and WordPress. It is refreshed daily.

Can I get this for all my sites?

Yes. Every monitored site is checked daily and the result is shown on its monitor page and in the API.

Check it every minute, not once

Add it as a monitor: checks every minute from several locations, alerts when it is really down, and SSL and domain expiry warnings. Free.

Create your free account

Vulnerability monitoring →