WordPress Theme & Plugin Detector Online

Last updated:

Find publicly exposed WordPress theme and plugin signals, with evidence and clear limits for hidden, renamed, cached or server-only components.

Enter a website URL to detect its WordPress theme:

How the WordPress Theme Detector Works

This tool scans a website's public source code to identify the WordPress theme and plugins in use. Here's the process:

  1. Enter a URL, paste any website address. The tool normalizes it automatically and fetches the homepage.
  2. WordPress signal check, the detector looks for public signatures such as /wp-content/, /wp-includes/, generator meta tags and REST API references. Their absence does not prove WordPress is not used.
  3. Theme detection, once WordPress is confirmed, it finds theme references in /wp-content/themes/ paths, then reads the theme's style.css header for name, version, author, and description.
  4. Plugin scan, the tool also identifies plugins by scanning for /wp-content/plugins/ references in loaded scripts and stylesheets.

Why Use a WordPress Theme Detector?

Public WordPress asset paths can reveal useful implementation clues. Results remain partial because custom paths, caching, security controls and server-only plugins can hide them:

  • Competitive research, see what theme and plugins your competitors rely on. If a site in your niche looks great and performs well, knowing their stack helps you make informed decisions about your own.
  • Design inspiration, found a website with a design you love? Instead of guessing, detect the exact theme and check if it fits your project.
  • Client work, agencies and freelancers often need to identify a client's current setup before starting a redesign or migration. This tool gives you that snapshot instantly.
  • Security triage, an exposed version can justify a closer authenticated review, but this detector cannot prove what is installed, active, current or vulnerable.

If you're evaluating a WordPress site's technical health, pair this with the PHP Version Checker to see what PHP version the server is running. Theme compatibility and PHP version compatibility go hand in hand. For a broader technology audit, the Website Technology Checker detects 80+ technologies including CDN, analytics, and marketing tools beyond just WordPress plugins. Check the site's security headers too, outdated plugins are a common reason security headers are missing or misconfigured.

Seeing a WordPress site weighed down by dozens of plugins? That bloat is exactly what slows pages and creates security holes. A WordPress to Astro migration rebuilds it as a fast, plugin-free Astro site, no theme or plugin maintenance required.

Understanding Your Detection Results

When the scan completes, here's what each piece of information means:

  • Theme name, a name or slug exposed by public theme assets and, when readable, the style.css header. Multiple loaded themes can make active-theme inference uncertain.
  • Version, a version exposed publicly by the page or stylesheet. It can be absent, cached or stale and is not compared with the latest release.
  • Author, the theme developer or company. Useful for finding the theme on WordPress.org or the developer's marketplace.
  • Parent theme, if the site uses a child theme, the parent theme is shown separately. Child themes inherit the parent's code and override specific parts.
  • Plugins detected, a list of plugins that load public assets (CSS/JS). Not every plugin is visible from the front end, admin-only plugins won't appear here.
  • WordPress version, if the site's generator meta tag is present, you'll see the WordPress core version too.

Next steps

WordPress Theme & Plugin Detector related tools and articles

Continue with the closest follow-up checks and guides based on this tool's topic, crawl intent, and optimization workflow.

WordPress Theme & Plugin Detector: FAQ

How does the detector identify a WordPress theme?
It scans the public homepage HTML for /wp-content/themes/ paths, then tries to read style.css for up to three detected theme slugs. When available, it parses the first 8 KB for standard theme header fields such as name, version, author, and template.
How are plugins detected?
The tool reports up to 30 unique slugs exposed in /wp-content/plugins/ asset paths in the homepage HTML. The display name is generated from the slug; it is not verified against the WordPress plugin directory.
Does the plugin list include every installed or active plugin?
No. It can find only plugins that expose a recognizable public path on that response. Server-only plugins, must-use plugins, renamed directories, bundled assets, caching, and optimization can hide or alter those clues.
Can the detected theme be wrong?
Yes. A page can reference parent, child, inactive, or leftover theme assets. The tool uses style.css Template headers when available and otherwise treats the first detected candidate as active, so verify before making migration or licensing decisions.
Why are the theme name or version missing?
The site may block style.css, omit standard header fields, use a custom build, rewrite asset paths, or load assets after JavaScript runs. If a slug is visible but the stylesheet cannot be parsed, the tool reports a title derived from that slug.
Does an exposed version mean the theme or plugin is vulnerable?
No. Public version text is only an inventory clue, and plugin versions are not determined by this scan. Compare confirmed products and versions with vendor advisories, then update and test through normal maintenance procedures.
Why might a WordPress site be reported as not WordPress?
Detection depends on at least one recognizable WordPress signal in the fetched homepage. Bot protection, a non-200 response, headless architecture, hidden paths, consent variants, or a 12-second timeout can prevent identification.
Is the scanned URL or source stored?
The URL is sent to WebAloha's server to fetch the public homepage and eligible theme stylesheets. This endpoint does not save the URL, page source, stylesheet content, or result to a database or cache.

Free 48-Hour Website Audit

Not sure what to fix first on your own website? We'll review it and tell you, in plain English. Free & non-obligatory.

Need Help With Your WordPress Site?

We help small-to-medium businesses build, optimize, and maintain WordPress websites.