How detection works
- We look for
/wp-content/themes/…/and/wp-content/plugins/…/paths in the page source, and for WordPress markers likewp-includesor thewp-jsonAPI. - For each theme folder we request
style.cssand read its header (Theme Name, Author, Version, Theme URI, Template). - If the header contains
Template:, the site uses a child theme — the parent theme is listed separately. - We show the theme's
screenshot.pngand a link to each detected plugin on WordPress.org.
Why results can be incomplete
- Renamed or custom themes show only the folder name.
- Security plugins and CDNs can hide or rewrite paths.
- Plugins without front-end files (for example backup or SEO plugins) leave no trace in the HTML.
- Headless WordPress sites do not expose themes at all.
Using what you find
Seeing a design you like is a great starting point, but check the theme's reviews, update history and speed before buying. Popular "multipurpose" themes often load a lot of CSS and JavaScript — measure with the Page Size Checker. Find who hosts the site with the Hosting Checker.
For site owners
Hiding your theme is not real security. Keep WordPress, themes and plugins updated, remove unused plugins and use strong passwords — that is what actually stops attacks.
Frequently asked questions
How do I find out what WordPress theme a site is using?
Enter the website URL. The detector finds the theme folder in the page source and reads its style.css to show the theme name, author, version and screenshot.
Can it detect plugins too?
Yes, any plugin that loads CSS, JavaScript or images on the page. Back-end-only plugins leave no trace in the HTML.
Why does it only show a folder name?
The theme may be custom or renamed, or its style.css may be blocked, so only the folder name is visible.
What is a child theme?
A child theme inherits the design and functions of a parent theme and adds customisations. It is identified by a Template line in its style.css.
What if the site is not WordPress?
The tool tells you no WordPress markers were found. The site may use another CMS or hide its paths.

