WordPress Theme & Plugin Detector
Paste any website address. If it runs WordPress, the detector names the theme (child and parent), reads its version and author where the stylesheet allows, and lists every plugin that leaves a trace on the page.
How to use it
- Enter the site address. The homepage is a good start; a blog post often reveals more plugins.
- Press Detect theme. The HTML is fetched from our server and every wp-content path is collected.
- Read the theme card, the plugin list and the WordPress signals. Nothing is probed beyond the page and the theme stylesheet.
What a WordPress page gives away
WordPress is not shy. The generator meta tag names it, the REST API link in the head points at /wp-json/, and every theme and plugin that adds a stylesheet or script does so from a path that carries its slug. That is enough to answer the question people actually ask, which is "what theme is that", and usually enough to see the page builder, the forms plugin, the cache plugin and the SEO plugin too.
The detector reads those signals from one fetch of the HTML, then requests the theme's style.css to turn the folder name into the real theme name, version and author. A child theme shows its parent through the Template header. Everything shown is what the site itself publishes to every visitor.
Theme detector FAQ
How does the detector know which theme a site uses?
A WordPress site loads its stylesheet and scripts from /wp-content/themes/<theme-name>/ and its plugins from /wp-content/plugins/<plugin-slug>/. The detector fetches the page HTML, collects every such path and reads the names from them. When the theme's style.css is reachable it also reads the Theme Name, Author and Version header from it, which is how a child theme and its parent are told apart.
Why does it find no theme on a site I know runs WordPress?
Some sites rename or move wp-content (a plugin or a manual constant can do that), serve assets from a CDN under another path, or combine every stylesheet into one minified file with no theme path left in the HTML. The detector reports what the HTML reveals; a site that hides it is still WordPress, it just does not say so.
Does it list every plugin the site has installed?
Only plugins that load something on the page you check: a stylesheet, a script, an inline marker or a known HTML signature. Back-end plugins (backups, security scanners, SEO plugins with no front-end output) leave no trace on the page and cannot be detected from outside. Check a few different pages for a fuller list.
Is it legal and safe to check someone else's site?
The detector reads only the public HTML any browser downloads; it does not log in, probe or scan. Reading what a site publishes is how browsers work. The result is for curiosity and research; using it to plan an attack is not what the tool is for and the backend refuses private and internal addresses.
Can I detect a theme from a screenshot or a site that is offline?
No. The detector needs the live HTML. If the site is down or blocks automated requests, try again later or use the Is It Down checker first.
More free tools: Meta Tag Checker · Page Speed Checker · Security Headers Checker · Website Safety Checker