Linux 软件免费装

在这里免费安装WordPress以及其他软件

OOPVulns - Vulnerability Scanner

开发者 oopspam
更新时间 2026年4月16日 15:22
PHP版本: 7.4 及以上
WordPress版本: 6.9
版权: GPLv3 or later
版权网址: 版权信息

标签

security themes plugins vulnerability scanner

下载

1.0.0 1.1.0

详情介绍:

OOPVulns is a modern, accessible WordPress plugin that continuously monitors your site for known security vulnerabilities in WordPress core, plugins, and themes. Features How It Works The plugin checks your installed WordPress core version, plugin versions, and theme versions against the OOPSpam vulnerability database. When a known vulnerability is found, you'll see it in the dashboard and optionally receive an email notification. External Service This plugin connects to the OOPSpam API to retrieve vulnerability information. When a scan runs, the following data is sent: No personal data, user information, or site content is transmitted. Vulnerability API checks are disabled by default and only run after an administrator explicitly enables scanning in plugin settings.

安装:

  1. Upload the oop-vulns folder to the /wp-content/plugins/ directory
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. Navigate to Tools → Vulnerability Scanner to configure the plugin
  4. Enter your OOPSpam API key (required for vulnerability checks)
  5. Enable "Vulnerability Scanning" (disabled by default)
  6. Click "Run Scan Now" to perform your first vulnerability scan

屏幕截图:

  • Detailed vulnerability information with severity badges
  • Settings page for scan frequency and notifications
  • Email notification example

常见问题:

Do I need an API key?

Yes, an API key is required to check for vulnerabilities. Each API key includes 40 vulnerability checks per month. Each plugin or theme check counts as one API call. If you're using the OOPSpam Anti-Spam plugin, the API key is shared automatically.

How are API calls counted?

Each vulnerability check for a plugin or theme counts as one API call. For example, if you have 20 plugins and 5 themes, a full scan uses 25 API calls (plus 1 for WordPress core).

How often does the plugin scan?

Scanning is disabled by default. After you explicitly enable scanning, you can configure scans to run daily or weekly and run manual scans from the dashboard.

What data is sent to the external API?

Only plugin/theme slugs and version numbers are sent. No personal data, content, or sensitive information is transmitted.

Does this plugin slow down my site?

No. Scans run in the background via WordPress cron and results are cached. The plugin does not affect frontend performance.

Can I use my own API key?

Yes. You can enter your API key in the plugin settings, or define OOPSPAM_API_KEY in your wp-config.php file.

更新日志:

1.1.0 1.0.0