WordPress Vulnerability Database API

Democratizing WordPress security information

Welcome to WordPress Vulnerability Database API. This project is a 100% open and free API, for access by any WordPress user, with the sole purpose of improving the security of a site, thanks to this information.

Behind the project

Contributors

Contributors @GitHub

Subscribe for API / Project information.

You’ll only receive a newsletter when there are some news related to the WPVulnerability project.

Privacy Data, by:
ROBOTSTXT / ESB10708568
Carrer Wagner 28 1-4
08923 Santa Coloma, Barcelona (Spain)

Project Updates

Some statistics

How many plugins, or themes are affected by vulnerabilities? (2024-04-01)

Plugins: 8,594 plugins — 27,384 vulnerabilities processed
Themes: 913 themes — 2,140 vulnerabilities processed
PHP: 690 vulnerabilities processed
Apache HTTPD: 263 vulnerabilities processed
nginx: 40 vulnerabilities processed

Check the statistics in our API.

API requests

2024-04: 12.40 m
2024-03: 10,91 m
2024-02: 9,12 m
2024-01: 8.60 m
2023-12: 7.19 m
2023-11: 5.95 m
2023-10: 7.27 m
2023-09: 7.30 m
2023-08: 7.39 m
2023-07: 7.01 m
2023-06: 7.59 m
2023-05: 8.01 m

2023-04: 48.77 m^*1
2023-03: 94.27 m
2023-02: 68.43 m
2023-01: 74.21 m
2022-12: 33.89 m
2022-11: 3.55 m
2022-10: 1.17 m
2022-09: 773.71 k
2022-08: 723.89 k
2022-07: 593.25 k
2022-06: no data available
2022-05: 71.69 k

*0: API requests only include public API requests.
*1: Improved the cache in the plugin has reduced 90% of the API requests.

Plugin

If you want to use this API in your WordPress, it’s easy, use the WPVulnerability plugin.

Compatibility:

Version: 3.1.1
WordPress: 4.1 → 6.5
PHP: 5.6 → 8.3
WPCS: 3.0.1
WP-CLI: 2.3.0 → 2.10.0

If you wish to create your own plugin, please, do it! The more, the merrier! If you need help reading the API or need some insights, contact us (there is an email a little further on). Moreover, if you create something, please, tell us, and we will add here.

Other plugins using the WordPress Vulnerability Database API

API

The API has available access to three elements: core, plugins and themes.

The API returns all contents in JSON and does not require any API Key. Please consider using it reasonably. If you are a big company or your users are going to use it intensively, please, make a donation.

Select the API endpoint:

More information:

Contact

If you have any suggestions, notices or notifications, please write to wordpress@wpsysadmin.com.

You can also check our legal / company information at robotstxt.es.