WPVulnerability
Democratizing WordPress security information
Welcome to WPVulnerability, the WordPress Vulnerability Database API. This project is a 100% open and free API, for access by any WordPress user, with the sole purpose of improving the security of a site, thanks to this information.
Newsletter
You’ll only receive a newsletter when there is some news related to the WPVulnerability project (mostly related to the API).
Privacy Data, by:
ROBOTSTXT / ESB10708568
Carrer Wagner 28
08923 Santa Coloma, Barcelona (Spain)
Latest project news
2023-01-03 API update
·
Wordfence vulnerabilities As we announced 3 weeks ago, we’ve added, review, and checked over 9,500 new vulnerabilities and added hundreds of new plugins and themes to the API. This has helped to…
2022-12-20 API update
·
Closed plugins From now on, plugins that are closed, or are going to close, in the WordPress.org repository, will automatically cause all vulnerabilities in that plugin to mark that the plugin is…
2022-11-01 API update
·
Fix (v1.5.1) There was an incongruencies between the “updated” data in the “last updated” API and the “public” API. This value should be the date (unixtime) when, in the database, the information…
2022-10-04 API update
·
Plugins API The Plugins API includes, from today, a new field called “latest” that informs, in UNIXTIME, the date of last update of a plugin. It is not available in all plugins…
Vulnerability’s statistics (2026-09-01)
49,441
at 16,684 plugins
4,197
at 2,331 themes
734
PHP
319
Apache
69
nginx
421
MariaDB
1,649
MySQL
772
ImageMagick
210
curl
22
memcached
73
Redis
64
SQLite
Check the statistics in our API.
API
The API has available access to three elements: core, plugins and themes.
The API returns all contents in JSON and does not require any API Key. Please consider using it reasonably. If you are a big company or your users are going to use it intensively, please, make a donation.
Software endpoints
WPVulnerability endpoints
More information
Javier Casares
WPVulnerability project lead
If you have any suggestions, notices or notifications, please write to me.
You can also check our legal / company information at robotstxt.es.



