FireFart
Forum Replies Created
-
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Report page stays blankHi,
the vulnerabilities stay empty if there are no known vulnerabilties for your version. You should have little colorized icons next to the plugin name. A green check mark means it’s safe, grey if we have no info about this plugin and a red cross if there are any found vulnerabilties.Hi Roberto,
currently there is an API limit of 50 requests per API key per day. This should be enough for a normal site for a daily scan. There is one request for the wordpress version, one for every theme and one for every plugin. After you enter an API key, a scan is scheduled automatically. Maybe you scanned a second time and thus hit the limit.Hi,
yes it’s for every plugin as there can be new vulnerabilities. Otherwise new vulnerbilities for plugins already checked where the vuln was not yet in our database would not be shown.Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Manual updating the reportHi,
multisite support is planed for an upcoming release. Currently we only check for the manage_option role.
As multisite installations share the same plugin base it would not make sense to reissue manual scans on each of the sites.
I think we will implement a hook whenever a plugin or theme is activated/deactivated/changed and update the report.This happens if you have another plugin installed that uses the same class name. Do you have any other scanning/security plugin installed that could use this class name?
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Missing SummaryDid you issue a scan? If there are no results yet the summary will be empty
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Localization@stk_jj awesome thanks!
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] LocalizationOk I uploaded our German, French and Spanish translations to the portal and once they are approved we can delete the translation files from the scan repo.
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Dashboard widgets error@smwc thanks for the report this error was fixed moments ago in version 1.1. If you update your plugin these errors should go away
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Localization@stk_jj If I get the localization page right there is no update on the localization files once imported. We are currently storing the translations in the SVN repository and this should contain all current translations (https://plugins.svn.www.ads-software.com/wpscan/trunk/languages/).
Do you know if there is way to update the files on translate.wordpress.com?
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] WPVulnDB API Token@dsl225 version 1.1 now shows an error if the API limit is hit. We have an internal feature request noted for a configureable cron start time
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] API KeyWe now also show a message in version 1.1 if the API limit is hit.
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Localization@stk_jj localizations are now available:
https://translate.www.ads-software.com/projects/wp-plugins/wpscanForum: Plugins
In reply to: [WPScan - WordPress Security Scanner] Localization@stk_jj thanks I fixed this internally (hopefully) and it will be available in e new version in the next few days
Forum: Plugins
In reply to: [WPScan - WordPress Security Scanner] API KeyHi @gbotica,
currently it’s only possible to set these options via the settings page. We will have a look into providing them via wp-config.php too in a future version.Regarding the API Limit you are right, there is a limit in place. If you need an account with unlimited API Usage please contact us at team [at] wpvulndb [.] com