28 lines (18 loc) · 636 Bytes

Plugin vulnerability command

WP-CLI command to check active WordPress plugins against the Wordfence Intelligence V3 vulnerability feed.

Requirements

WP-CLI
WordPress site context
WORDFENCE_API_KEY environment variable

Installation

wp package install https://github.com/szepeviktor/plugin-vulnerability.git

Usage

WORDFENCE_API_KEY="<your Wordfence v3 API key>" wp plugin vuln

Register a free account: https://www.wordfence.com/sign-in/?action=register

Notes

The command checks active plugins only.
It fails fast on feed/schema mismatches and unmatched active plugin slugs.