=== WPVulnerability === Contributors: javiercasares, davidperez, lbonomo Tags: security, vulnerability, site-health Requires at least: 4.1 Tested up to: 6.3 Stable tag: 2.0.2 Requires PHP: 5.6 Version: 2.0.2 License: EUPL v1.2 License URI: https://www.eupl.eu/1.2/en/ Check WordPress core, plugins, and theme vulnerabilities with information from the [WordPress Vulnerability Database API](https://vulnerability.wpsysadmin.com/). == Description == This plugin, with the free and unlimited [WordPress Vulnerability Database API](https://vulnerability.wpsysadmin.com/), allows to analyze all published vulnerabilities directly from your WordPress. * The current version of your WordPress will be checked. * All the plugins you have, whether from the repository, external or premium, will be checked. * All the themes you have, whether from the repository, external or premium, will be checked. In case there is any documented vulnerability, you can visit the Site Heath of your WordPress and find the vulnerability information. You may find that your plugin or theme has a vulnerability, and it is as simple as upgrading to an updated version; it will inform you if the plugin/theme is no longer available for download or does not have a patch. In settings you will have the options to send notification periodically for your installation. You can select between every day or weekly basis. And then, You will find these wpcli commands: - `wp wpvulnerability --help` - `wp wpvulnerability plugins` - `wp wpvulnerability core` - `wp wpvulnerability themes` = Privacy Policy = This plugin or the WordPress Vulnerability Database API does not collect any information about your site, your identity, the plugins, themes or content the site has. = Data reliability = The information provided by the information database comes from different sources that have been reviewed by third parties. There is no liability of any kind for the information. Act at your own risk. **Contributors** You can contribute to this plugin at the [WPVulnerability GitHub repository](https://github.com/javiercasares/wpvulnerability). == Installation == = Automatic download = Visit the plugin section in your WordPress, search for [wpvulnerability]; download and install the plugin. = Manual download = Extract the contents of the ZIP and upload the contents to the `/wp-content/plugins/wpvulnerability/` directory. Once uploaded, it will appear in your plugin list. == Frequently Asked Questions == = Where does the vulnerability information come from? = The origin is in the WPVulnerability.com API. The vulnerabilities that appear in this API come from different sources, such as CVEs. = Is data from my site sent anywhere? = No. Never. Your privacy is very important to us. We do not commercialize with your data. = What vulnerabilities will I find? = Vulnerabilities in WordPress core, plugins and themes are documented. = What do I do if my site has a vulnerability? = First of all, peace of mind. Investigate what the vulnerability is and, above all, check that you have the latest version of the compromised element. We actively recommend that you keep all your WordPress and its plugins up to date. == Changelog == = 2.0.2 = * Fix the Notification system. = 2.0.1 = * Update the readme.txt. * Fix the Site Health messages. * Added new options to cache the vulnerability counter. = 2.0.0 = * The plugin has been completely refactored. * WordPress support is now from WordPress 4.1 to 6.2. Before it was only from WordPress 5.2. * PHP support is now from PHP 5.6 to PHP 8.2. Before it was only from PHP 7.2. * If the WordPress version supports it, vulnerabilities are displayed in the Core update screen. * WP-CLI works from WP-CLI 2.3 to 2.7. * Calls can be made from WP-CLI `wp help wpvulnerability` to list vulnerabilities in Core `wp wpvulnerability core`, Plugins `wp wpvulnerability plugins` and Themes `wp wpvulnerability themes`. Before only Plugins. * Site Health shows core vulnerabilities, which were not previously shown. = 1.3.3 = * Code security improvements * Fix some PHP errors = 1.3.1 = * Code security improvements * Fix the Severity value * A better Site Health information * Compatibility: WordPress 5.2 - WordPress 6.2 * Compatibility: PHP 7.2 - PHP 8.1 = 1.3.0 = * Improved security in code. * Information, when available, about the vulnerability, in a simplified way. Only in the plugin list. * Information, when available, about the potential severity and exploitability. Only in the plugin list. * Links to sources to get additional information. Only in the plugin list. = 1.2.3 = * Fix WP_Error object. = 1.2.2 = * Fix WP_Error object. = 1.2.1 = * Some fixed to improve the operators. = 1.2.0 = * Sends email periodically. You can choose who is going to receive the emails. * First approach to WPCLI Commands (thanks to @lbonomo). = 1.1.0 = * Fix: Prevents text domain not given correctly. * Fix: strings not translated. = 1.0.1 = * Fix: strings not translated. = 1.0.0 = * Added tabs in Health check. = 0.2.0 = * Improved the information in plugins list. = 0.1.0 = * Notification in the plugins list. * First release.