Checks whether a site runs WordPress and shows its version, theme and plugins against the latest releases, plus common security exposures. Only public pages are requested - nothing is logged in to or tested for vulnerabilities.