hosting
GET /v1/sites/{siteId}/wordpress/vulnerabilities
Published advisories against the plugin and theme versions installed here.
Pagpapatotoo
Magpadala ng API key bilang isang bearer token. Kailangang taglayin ng key ang pahintulot na sites.view; ang key na wala nito ay tatanggihan gamit ang 403, hindi 404.
Ang endpoint na ito ay hindi nangangailangan ng id ng organisasyon. Natutukoy na ng iyong key ang organisasyong kinabibilangan nito, at nakatuon ang tugon dito.
Subukan ito
Palitan ang anuman sa loob ng mga panaklong na may anggulo ng iyong sariling mga halaga, at ang placeholder ng key na may key mula sa iyong dashboard.
curl -X GET https://api.zinndigital.com/v1/sites/{siteId}/wordpress/vulnerabilities \
-H "Authorization: Bearer zdk_live_…"Nakalagda? Ang API console sa iyong dashboard ay awtomatikong naglalagay ng iyong tunay na ID ng organisasyon at sariling susi, at pinapatakbo ang kahilingan laban sa live na API upang makita mo ang aktwal na tugon. Buksan ang endpoint na ito sa console ng API
Mga Detalye
Joins the site's installed component versions to a public vulnerability feed, so the answer is about **the version this site runs** rather than about the plugin in general. ⛔⛔ `checked: false` means **we could not assess this component**, not "nothing found". Every bespoke plugin, every premium plugin with no public listing and every advisory published in the last hour reads as unchecked. A client that renders an unchecked row as clean is making a safety claim the platform has no basis for — the one output this endpoint must never produce. `unchecked` counts them. ⛔ `truncated` is `true` when the site has more components than one request will look up. A bounded answer that does not say it is bounded reads as a complete one. ⛔ `fixed_in` is blank when the advisory is unfixed **or** names only an upper bound — "affected at or below X" does not mean "fixed in X", and reporting it as such would send a customer to a version that is still vulnerable. Available on **both** product lines: the inputs are the plugin and theme listings, which every WordPress surface answers. Requires `sites.view`.
Mga Parameter
| Pangalan | Uri | Kailangan | Ano ito |
|---|---|---|---|
siteId (path) | Uuid | Oo | Site ID (UUIDv7). |
Tugon
| Pangalan | Uri | Kailangan | Ano ito |
|---|---|---|---|
data | WordPressComponentRisk[] | Oo | — |
worst | string | Oo | The worst severity found across the site, or `""`. |
unchecked | integer | Oo | How many components could not be assessed. ⛔ The number that says how much of the estate this screen cannot speak for. |
checked_components | integer | Oo | How many components were assessed. |
advisories | integer | Oo | How many advisories were found in total. |
truncated | boolean | Oo | True when the site has more components than one request will look up. |
Mga error na maibabalik ng endpoint na ito
401 · 403 · 404 · 429 · 503