Wordpress websites often have very series vulnerabilities and it is quite hard to find them out without paying a security analyst. But WPSEC is a much cheaper way to find the vulnerablities in your website and without paying a huge sum of money to a security analyst.

Some of my websites were malfutioning and so I decided to check them with WPSEC and found out that three websites of mine were infected by a malware. But after investigating further only two of really had a malware and the other one simply had a bug.

I was surprised that out of 8 of my sites, 2 were vulnerable. And I used other tools too scan my websites but none of them could find any problem but WPSEC did and the reason was an extension that I installed on those 2 sites.