WPVulnerability
Democratizing WordPress security information
Welcome to WPVulnerability, the WordPress Vulnerability Database API. This project is a 100% open and free API, for access by any WordPress user, with the sole purpose of improving the security of a site, thanks to this information.
Newsletter
You’ll only receive a newsletter when there is some news related to the WPVulnerability project (mostly related to the API).
Privacy Data, by:
ROBOTSTXT [ESB10708568]
Carrer Girona 7
08773 Font del Bosc (Spain)
Latest project news
2026-05-07 API update and Docs
·
Supply-Chain Attack Data Now in the API We’ve added supply-chain audit intelligence to the WPVulnerability API. The new SupplyChainEntry model covers plugin ownership hijacks and update-channel abuse, incidents that fall outside traditional…
2026-04-13 API update
·
Impact data: richer, structured, and forward-looking We have been working on a significant update to the impact section of the WPVulnerability API. This update introduces new structured data blocks, deprecates the legacy…
2025-06-17 API update
·
Stability Improvements Over the past two weeks (June 1–14), we experienced some platform stability issues that have now been fixed. These problems caused 5xx errors. The issue with the origin server has…
2025-04-16 About the CVE
·
On this occasion, although we are still working on some improvements, I simply bring you this news because we do not yet know how it could affect the information we publish. Although…
Vulnerability’s statistics (2026-11-01)
53,008
at 17,133 plugins
4,390
at 2,392 themes
747
PHP
339
Apache
75
nginx
436
MariaDB
1,727
MySQL
856
ImageMagick
243
curl
23
memcached
74
Redis
64
SQLite
Check the statistics in our API.
API
The API has available access to three elements: core, plugins and themes.
The API returns all contents in JSON and does not require any API Key. Please consider using it reasonably. If you are a big company or your users are going to use it intensively, please, make a donation.
Software endpoints
WPVulnerability endpoints
More information
Javier Casares
WPVulnerability project lead
If you have any suggestions, notices or notifications, please write to me.
You can also check our legal / company information at robotstxt.es.
