WPVulnerability

描述

This plugin, with the free and unlimited WordPress Vulnerability Database API, allows to analyze all published vulnerabilities directly from your WordPress.

  • The current version of your WordPress will be checked.
  • All the plugins you have, whether from the repository, external or premium, will be checked.
  • All the themes you have, whether from the repository, external or premium, will be checked.

In case there is any documented vulnerability, you can visit the Site Heath of your WordPress and find the vulnerability information. You may find that your plugin or theme has a vulnerability, and it is as simple as upgrading to an updated version; it will inform you if the plugin/theme is no longer available for download or does not have a patch.

In settings you will have the options to send notification periodically for your installation. You can select between every day or weekly basis.

And then, You will find these wpcli commands:
wp wpvulnerability --help
wp wpvulnerability plugins (partially implemented)
wp wpvulnerability core (not implemented yet)
wp wpvulnerability themes (not implemented yet)

Privacy Policy

This plugin or the WordPress Vulnerability Database API does not collect any information about your site, your identity, the plugins, themes or content the site has.

Data reliability

The information provided by the information database comes from different sources that have been reviewed by third parties. There is no liability of any kind for the information. Act at your own risk.

Contributors

You can contribute to this plugin at the WPVulnerability GitHub repository.

Links

螢幕截圖

安裝

Automatic download

Visit the plugin section in your WordPress, search for [wpvulnerability]; download and install the plugin.

Manual download

Extract the contents of the ZIP and upload the contents to the /wp-content/plugins/wpvulnerability/ directory. Once uploaded, it will appear in your plugin list.

常見問題

Where does the vulnerability information come from?

The origin is in the WPVulnerability.com API. The vulnerabilities that appear in this API come from different sources, such as CVEs.

Is data from my site sent anywhere?

No. Never. Your privacy is very important to us. We do not commercialize with your data.

What vulnerabilities will I find?

Vulnerabilities in WordPress core, plugins and themes are documented.

What do I do if my site has a vulnerability?

First of all, peace of mind. Investigate what the vulnerability is and, above all, check that you have the latest version of the compromised element. We actively recommend that you keep all your WordPress and its plugins up to date.

評價

2022年11月21日
Una manera muy cómoda de conocer las vulnerabilidades, en cuanto a plugins, de una web. ¡Muchas gracias!
2022年6月6日
This plugin uses an API to check if the version of your core, themes and/or plugins present on your WordPress installation has any known vulnerability. It cares about efficiency so it can be always active, it won't have any noticeable affection to the load time of the public website (it only connects to the api when an administrator installs/updates something and also via cron each several hours). I can recommend to have this plugin active to help you spot possible vulnerabilities when forgot or delayed the update of plugin/theme/core.
2022年5月6日
Hace años que uso diferentes fuentes de ddbb's para estar al día de las vulnerabilidades de plugins y temas, pero siempre ha sido un trabajo excesivamente manual. Este plugin me ha ayudado a simplificar el proceso de comprobación. Se instala y activa y al momento, en Plugins, zassss, te indica en rojo los que son vulnerables, lo que permite, a los que administramos muchos sitios, de una vista rápida ver que plugins hay que actualizar inmediatamente y cuales desechar por razones de seguridad. Gracias a Javier y David por este trabajo. ¡Muy útil! 👏👏👏
2022年5月6日
Me encanta poder ver en la misma página de plugins las alertas de las vulnerabilidades de cada plugin. Esto debería estar en el core 🙂
閱讀全部8個評價

貢獻者及開發者

“WPVulnerability” 是一個開源的軟體。以下的人對這個外掛作出了貢獻。

貢獻者

WPVulnerability 外掛目前已有 11 個本地化語言版本。 感謝所有譯者為這個外掛做出的貢獻。

將 WPVulnerability 外掛本地化為台灣繁體中文版。

對開發相關資訊感興趣?

任何人均可瀏覽程式碼、查看 SVN 存放庫,或透過 RSS 訂閱開發記錄

修改日誌

1.3.3

  • Code security improvements
  • Fix some PHP errors

1.3.1

  • Code security improvements
  • Fix the Severity value
  • A better Site Health information
  • Compatibility: WordPress 5.2 – WordPress 6.2
  • Compatibility: PHP 7.2 – PHP 8.1

1.3.0

  • Improved security in code.
  • Information, when available, about the vulnerability, in a simplified way. Only in the plugin list.
  • Information, when available, about the potential severity and exploitability. Only in the plugin list.
  • Links to sources to get additional information. Only in the plugin list.