What “WordPress audit” means here
For plugin authors, it is not a full site pentest. It is whether your wordpress.org listing and published package look trustworthy next to peers — and what changed since last month.
Site owners still need classic site audits; authors need listing and package evidence on a schedule.
Checklist
1. Ratings and review velocity. 2. Last update and “tested up to.” 3. Support threads answered. 4. Description and screenshots match the product. 5. Zip scan for surprising outbound hosts. 6. Two peer plugins on the same scorecard.
Fix listing trust before vanity feature copy. Abandoned peers with prettier banners still lose installs.
Run it on AuditHQ
Create a WordPress plugin project, paste the wordpress.org URL or slug, and run a free score. Save the project to schedule. Pro unlocks ranked fixes and deeper package reads.
Official site: audithq.app — not lookalike domains.