WPLifeCycle – Free PHP Version Info & Website Manager
WPLifeCycle – Free PHP Version Info & Website Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for WPLifeCycle – Free PHP Version Info & Website Manager has a vendor fix available, so running the current release closes it.
All of these findings were reported by Legion Hunter. WPLifeCycle – Free PHP Version Info & Website Manager is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-32363WPLifeCycle <= 3.3.1 - Missing Authorization
Read the full analysisVulnerability Records

WPLifeCycle – Free PHP Version Info & Website Manager
Author
Funlus Oy
WPLifeCycle connects a WordPress website to centralized monitoring and management while keeping each site protected by its own token-based connection. It combines lifecycle visibility, operational tools, security controls, and recovery workflows in one plugin. Key features Lifecycle monitoring for PHP, WordPress, MySQL, and installed plugins Token-based WPLifeCycle connection with automatic and on-demand telemetry updates Security scanning and hardening with OWASP checks, XML-RPC control, custom login URLs, login attempt limits, login honeypots, new administrator cooldowns, and IP allowlists and blocklists Security events and access logs with super critical incident monitoring and tamper-evident event chains Performance and SEO scans with actionable scores and findings Plugin and hook monitoring for update availability, history, registered actions, filters, and conflicts One-click and scheduled updates for WordPress core, plugins, and themes Integrated backups and restores with integrity checks, safe archive handling, remote storage support, scheduling, and retention controls Standalone WordPress migration for restoring a compatible backup into a clean WordPress installation Secure admin links that are HTTPS-only, single-use, and time-limited Built for real-world maintenance workflows with consent-based data sharing, minimal setup, server-conscious scans, and translation support. Usage Open Tools → WPLifeCycle to view PHP version details and run scans. Click Generate Secure Admin Link to create a one-off login URL. Grant data-sharing consent if you want this site monitored centrally. Video
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C