WPVulnerability

WordPress Vulnerability Database API

General

  • 2026-05-07 API update and Docs

    ·

    Javier Casares

    Supply-Chain Attack Data Now in the API We’ve added supply-chain audit intelligence to the WPVulnerability API. The new SupplyChainEntry model covers plugin ownership hijacks and update-channel abuse, incidents that fall outside traditional CVE-based vulnerability records. Each entry includes: A single plugin may have multiple entries if it was compromised more than once. This data is…

    Read More

  • 2025-04-16 About the CVE

    ·

    Javier Casares

    On this occasion, although we are still working on some improvements, I simply bring you this news because we do not yet know how it could affect the information we publish. Although we have different sources of data, this is certainly going to be a big blow to cybersecurity. – MITRE has announced that its…

    Read More