I recently got a website developed from an agency, and after completion when I showed it to a friend of mine he asked me did the agency use a nulled theme? I wasn't sure how to check that and getting paranoid now.

I've done some checks on online softwares like virustotal to check if website is nulled or ont but still not sure.

Can someone tell how to be sure if a website theme/plugin is nulled or not ?

  • I am curious about this issue too. I have just finish a website with a theme which i have api key and its updating but after some time on google there are malware on site. I tried to fix this with wordfence but the google still provide links of unknow sites
    – kayani
    Oct 4, 2023 at 12:34
  • Can you download a fresh copy of the theme from the authors then? I'd ask whoever gave you the API key for access to the download account if you don't have it already. Or it might be easier to just pay for a fresh license if you're not sure.
    – Rup
    Oct 4, 2023 at 12:38

1 Answer 1


Virus total can't assure that theme\plugin is original. Making such check is very theme\plugin specific so it's just general advice.

First just check theme by theme name if it's free or paid. Just google for it. Get to theme\plugin's developers website and check what is latest version of this theme\plugin and check which version you have.

Then depending on theme\plugin - check if it has license key set up.

If you've found that your site using paid theme\plugin, ask your agency to provide you with keys which will allow updates later on.

Some Plugins like GravityForms offer only a per year licenses so you'll have to renew it yourself probably.

Bad things for you if you have some plugin\theme nulled used are:

  • you will not get updates,
  • you may have a built into code security breaches\viruses\backdors injected by those who nulled it.

You can also try Wordfence wp plugin to check core and free plugins code for consistency wordpress.org/plugins/wordfence/ so their codes will not be different from the ones in wordpress.org repository. I'm not sure it will check premium\paid plugins\themes files but you can give it a try.

Also make a backup of your whole site before checking, making changes, so you'll be able to rollback easily without data loss if something will go wrong. For example License may expire on some plugin and plugin will figure this out at time of your make a check.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.