WordPress is one of the most widely used content management systems, powering millions of websites. Identifying whether a website runs on WordPress can be useful for web developers, marketers, and competitors analyzing industry trends. Several methods can determine if a site is built with WordPress, ranging from simple observations to advanced technical investigations.
Checking the Website Source Code
Inspecting the Page Source
A quick way to check if a website is using WordPress is by viewing its source code. Right-click anywhere on the page and select “View Page Source” or press Ctrl + U
on Windows or Cmd + Option + U
on macOS. Search for the term “wp-content” in the source code. If it appears in file paths, such as:
https://example.com/wp-content/themes/
https://example.com/wp-content/plugins/
then the site is likely powered by WordPress. The “wp-content” directory is unique to WordPress and stores themes, plugins, and media files.
Examining Meta Tags
Some WordPress websites include generator meta tags in the source code. Press Ctrl + F
or Cmd + F
to open the search function and look for:
<meta name="generator" content="WordPress" />
While many site owners remove this tag for security reasons, its presence confirms that WordPress is being used.
Checking the Login Page
WordPress websites have a default login URL structure. Typing /wp-admin
or /wp-login.php
after the domain name can reveal whether the site is built on WordPress. For example:
https://example.com/wp-admin
https://example.com/wp-login.php
If the page redirects to a login interface or a branded login page, the website likely runs on WordPress. Some site owners modify this URL for security, so failure to load does not necessarily mean the site is not WordPress-based.
Using Online Detection Tools
Several online tools can analyze a website and determine if it is running WordPress. These tools scan site architecture, headers, and scripts to identify WordPress usage. Some of the most reliable tools include:
- BuiltWith – Provides detailed insights into CMS, plugins, and technology stack.
- IsItWP – A specialized WordPress detection tool that quickly identifies WordPress sites.
- Wappalyzer – A browser extension that detects WordPress and other CMS platforms.
Entering a website URL in these tools generates a report confirming whether the site is running WordPress.
Inspecting Themes and Plugins
Checking the Theme Name
WordPress sites often use publicly available themes. The theme name can be found by viewing the page source and searching for:
wp-content/themes/
The directory name following /themes/
is usually the theme name. Searching for this name online may reveal whether it is a default WordPress theme or a custom design.
Identifying Installed Plugins
Many WordPress sites use third-party plugins to add functionality. Searching for wp-content/plugins/
in the source code can reveal active plugins. Some common plugins found in WordPress sites include:
- Yoast SEO (
wp-content/plugins/wordpress-seo/
) - WooCommerce (
wp-content/plugins/woocommerce/
) - Contact Form 7 (
wp-content/plugins/contact-form-7/
)
Identifying plugins helps understand the functionality and structure of a WordPress website.
Analyzing HTTP Headers
Examining HTTP headers provides deeper insights into a website’s underlying technology. Tools such as Chrome DevTools or cURL can reveal WordPress signatures in response headers.
Using Browser Developer Tools
- Open the website in Google Chrome.
- Press
F12
orCtrl + Shift + I
(Windows) /Cmd + Option + I
(Mac) to open DevTools. - Navigate to the Network tab and reload the page.
- Click on the main site request and check the Headers tab for telltale signs such as:
X-Powered-By: WordPress
Set-Cookie: wordpress_logged_in
Using cURL Command
Running the following command in a terminal may reveal WordPress indicators:
curl -I https://example.com
The response headers may include X-Powered-By: WordPress
or mention PHP versions commonly associated with WordPress hosting environments.
Examining the Robots.txt File
WordPress sites frequently include specific rules in the robots.txt
file, which can be accessed by visiting:
https://example.com/robots.txt
Common WordPress-specific directives include:
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php
If these rules appear, the website is most likely using WordPress.
Checking for REST API Endpoints
WordPress provides a REST API for data retrieval and interaction. A quick check can be done by accessing:
https://example.com/wp-json/wp/v2/
If this URL returns a structured JSON response, the site is running WordPress. Some websites disable this API for security reasons, so lack of a response does not confirm non-WordPress status.
Conclusion
Identifying whether a website is built on WordPress can be done using multiple methods, including source code inspection, login page access, detection tools, and HTTP header analysis. Some site owners take measures to obscure WordPress usage for security reasons, but a combination of these techniques can help determine the underlying CMS