WordPress Theme Detector

Find out which WordPress theme - and version - any site is running, including the active theme, with multi-method fingerprinting. Free online tool, no installation, instant results in your browser.

Free tier
No Signup Required
Instant Results
Active theme ID
https://

No credit card required • Instant results

Used by developers and agencies for competitive research and audits

Stylesheet & asset fingerprinting
Version & CVE lookup

Active Theme Identification

Pinpoint the theme actually rendering the site from stylesheet headers, body classes, and asset paths.

  • style.css header parsing
  • Body-class detection
  • wp-content/themes paths
  • Parent & child themes

Version & Metadata

Where exposed, we extract the theme version and surface useful metadata about the theme.

  • Theme version extraction
  • Asset ?ver= fingerprinting
  • Installed-theme enumeration
  • Outdated theme flag

Theme Vulnerabilities

Detected themes are cross-referenced against 100K+ CVEs, and the scan returns the full WordPress report.

  • Theme CVE matching
  • CVSS 3.1 severity
  • Plugins & core included
  • One scan, full picture

What People Use the Theme Detector For

Competitive research
See what theme a site you admire is built on.
Inventory & audit
Confirm what is installed and whether it is current.
Security check
Spot outdated or vulnerable themes before attackers do.

Frequently Asked Questions

How do I find out what WordPress theme a site is using?

Paste the site URL above and run the scan. ScanTower fingerprints the active theme from stylesheet headers, body classes, and wp-content/themes asset paths, then reports the theme name and version.

Can it detect the active theme specifically?

Yes. We identify the currently active theme - the one actually rendering the site - as well as any other installed themes whose assets are exposed.

Does it detect the theme version too?

When the version is exposed through the style.css header or asset query strings, we report it. We then cross-reference it against known vulnerabilities for that theme.

Why would I want to know a site's theme?

Developers and agencies use it for competitive research and to recreate looks they admire; site owners use it to confirm what is installed and whether the theme is outdated or vulnerable.

Do I get more than just the theme name?

Every detection runs the full WordPress scan, so along with the theme you also see the WordPress core version, detected plugins, known CVEs, and common security misconfigurations in one report.

That's Just the Beginning

FREE

This WordPress Theme Detection scan caught some issues. Run a Full Security Scan to uncover hidden threats like exposed secrets, malicious scripts, and supply chain attacks this quick check missed.

No Credit CardNo SignupInstant ResultsFree tier