hosting

GET /v1/sites/{siteId}/wordpress/vulnerabilities

Published advisories against the plugin and theme versions installed here.

Vituo vyote vya hosting

Uthibitishaji

Tuma ufunguo wa API kama tokeni ya kubeba. Ufunguo lazima uwe na ruhusa ya sites.view; ufunguo usio nayo unakataliwa kwa 403, si 404.

Endpoint hii haichukui kitambulisho cha shirika. Ufunguo wako tayari unalitambua shirika linalohusika, na jibu limewekewa kikomo kwa shirika hilo pekee.

Jaribu

Badilisha chochote kilicho ndani ya mabano ya pembe na maadili yako mwenyewe, na kishikiliaji cha ufunguo na ufunguo kutoka kwa dashibodi yako.

curl -X GET https://api.zinndigital.com/v1/sites/{siteId}/wordpress/vulnerabilities \
  -H "Authorization: Bearer zdk_live_…"

Umeingia kwenye akaunti? Dashibodi yako ya kiweko cha API inajaza kitambulisho chako halisi cha shirika na ufunguo wako mwenyewe, na kuendesha ombi dhidi ya API ya moja kwa moja ili uweze kuona jibu halisi. Fungua sehemu hii ya mwisho (endpoint) kwenye konsole ya API

Maelezo

Joins the site's installed component versions to a public vulnerability feed, so the answer is about **the version this site runs** rather than about the plugin in general. ⛔⛔ `checked: false` means **we could not assess this component**, not "nothing found". Every bespoke plugin, every premium plugin with no public listing and every advisory published in the last hour reads as unchecked. A client that renders an unchecked row as clean is making a safety claim the platform has no basis for — the one output this endpoint must never produce. `unchecked` counts them. ⛔ `truncated` is `true` when the site has more components than one request will look up. A bounded answer that does not say it is bounded reads as a complete one. ⛔ `fixed_in` is blank when the advisory is unfixed **or** names only an upper bound — "affected at or below X" does not mean "fixed in X", and reporting it as such would send a customer to a version that is still vulnerable. Available on **both** product lines: the inputs are the plugin and theme listings, which every WordPress surface answers. Requires `sites.view`.

Vigezo

JinaAinaInayohitajikaKilicho hiki
siteId (path)UuidNdiyoSite ID (UUIDv7).

Majibu

JinaAinaInayohitajikaKilicho hiki
dataWordPressComponentRisk[]Ndiyo
worststringNdiyoThe worst severity found across the site, or `""`.
uncheckedintegerNdiyoHow many components could not be assessed. ⛔ The number that says how much of the estate this screen cannot speak for.
checked_componentsintegerNdiyoHow many components were assessed.
advisoriesintegerNdiyoHow many advisories were found in total.
truncatedbooleanNdiyoTrue when the site has more components than one request will look up.

Hitilafu ambazo mwisho huu unaweza kurudisha

401 · 403 · 404 · 429 · 503