API Wrapper for various WordPress Vulnerability Database Services
- Patchstack
- WP Vulnerability DB (https://www.wpvulnerability.com/)
- WP Scan (not recently tests since v3)`
Example:
use FernleafSystems\ApiWrappers\WpVulnDb\WPScan;
$conn = new WPScan\Connection();
$conn->api_key = 'abc123'; // Get this when you register
$pluginVuln = ( new WPScan\Plugins\Retrieve() )
->setConnection( $conn )
->filterByVersion( '5.1' )
->filterBySlug( 'wp-simple-firewall' )
->retrieve();- When a vulnerability is found they can be enumerated from the array returned from
$oPluginVuln->getVulns() nullwill be returned if there are no vulnerabilities found for the particular slug and version so care must be taken to use the result of the request safely.- It is not necessary to filter by version. If you omit this, then all available vulnerabilities will be returned.