How to Tell if a Website is WordPress

WordPress is one of the most widely used content management systems, powering millions of websites. Identifying whether a website runs on WordPress can be useful for web developers, marketers, and competitors analyzing industry trends. Several methods can determine if a site is built with WordPress, ranging from simple observations to advanced technical investigations.

Checking the Website Source Code

Inspecting the Page Source

A quick way to check if a website is using WordPress is by viewing its source code. Right-click anywhere on the page and select “View Page Source” or press Ctrl + U on Windows or Cmd + Option + U on macOS. Search for the term “wp-content” in the source code. If it appears in file paths, such as:

  • https://example.com/wp-content/themes/
  • https://example.com/wp-content/plugins/

then the site is likely powered by WordPress. The “wp-content” directory is unique to WordPress and stores themes, plugins, and media files.

Examining Meta Tags

Some WordPress websites include generator meta tags in the source code. Press Ctrl + F or Cmd + F to open the search function and look for:

<meta name="generator" content="WordPress" />

While many site owners remove this tag for security reasons, its presence confirms that WordPress is being used.

Checking the Login Page

WordPress websites have a default login URL structure. Typing /wp-admin or /wp-login.php after the domain name can reveal whether the site is built on WordPress. For example:

  • https://example.com/wp-admin
  • https://example.com/wp-login.php

If the page redirects to a login interface or a branded login page, the website likely runs on WordPress. Some site owners modify this URL for security, so failure to load does not necessarily mean the site is not WordPress-based.

Using Online Detection Tools

Several online tools can analyze a website and determine if it is running WordPress. These tools scan site architecture, headers, and scripts to identify WordPress usage. Some of the most reliable tools include:

  • BuiltWith – Provides detailed insights into CMS, plugins, and technology stack.
  • IsItWP – A specialized WordPress detection tool that quickly identifies WordPress sites.
  • Wappalyzer – A browser extension that detects WordPress and other CMS platforms.

Entering a website URL in these tools generates a report confirming whether the site is running WordPress.

Inspecting Themes and Plugins

Checking the Theme Name

WordPress sites often use publicly available themes. The theme name can be found by viewing the page source and searching for:

wp-content/themes/

The directory name following /themes/ is usually the theme name. Searching for this name online may reveal whether it is a default WordPress theme or a custom design.

Identifying Installed Plugins

Many WordPress sites use third-party plugins to add functionality. Searching for wp-content/plugins/ in the source code can reveal active plugins. Some common plugins found in WordPress sites include:

  • Yoast SEO (wp-content/plugins/wordpress-seo/)
  • WooCommerce (wp-content/plugins/woocommerce/)
  • Contact Form 7 (wp-content/plugins/contact-form-7/)

Identifying plugins helps understand the functionality and structure of a WordPress website.

Analyzing HTTP Headers

Examining HTTP headers provides deeper insights into a website’s underlying technology. Tools such as Chrome DevTools or cURL can reveal WordPress signatures in response headers.

Using Browser Developer Tools

  1. Open the website in Google Chrome.
  2. Press F12 or Ctrl + Shift + I (Windows) / Cmd + Option + I (Mac) to open DevTools.
  3. Navigate to the Network tab and reload the page.
  4. Click on the main site request and check the Headers tab for telltale signs such as:
    • X-Powered-By: WordPress
    • Set-Cookie: wordpress_logged_in

Using cURL Command

Running the following command in a terminal may reveal WordPress indicators:

curl -I https://example.com

The response headers may include X-Powered-By: WordPress or mention PHP versions commonly associated with WordPress hosting environments.

Examining the Robots.txt File

WordPress sites frequently include specific rules in the robots.txt file, which can be accessed by visiting:

https://example.com/robots.txt

Common WordPress-specific directives include:

Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

If these rules appear, the website is most likely using WordPress.

Checking for REST API Endpoints

WordPress provides a REST API for data retrieval and interaction. A quick check can be done by accessing:

https://example.com/wp-json/wp/v2/

If this URL returns a structured JSON response, the site is running WordPress. Some websites disable this API for security reasons, so lack of a response does not confirm non-WordPress status.

Conclusion

Identifying whether a website is built on WordPress can be done using multiple methods, including source code inspection, login page access, detection tools, and HTTP header analysis. Some site owners take measures to obscure WordPress usage for security reasons, but a combination of these techniques can help determine the underlying CMS