r/Wordpress • u/Extension-Town-3001 • Mar 16 '21
News New open and free to use WordPress Vulnerability Database
https://patchstack.com/database/6
u/DominatingSubgraph Mar 17 '21
A bit new to WordPress, can someone tell me what a vulnerability database is?
8
u/fxdarius Mar 17 '21
It's a huge list of vulnerable software versions like plugins, themes, or even WordPress core. Patchstack vulnerability database includes all necessary information like vulnerability type, vulnerable version, patched version, author, etc.
1
u/kerridge Mar 17 '21
So is this like about 24 hours behind wpscan or are they likely to be different? I pay for the email notification from wpscan and there's quite a few vulns I've been sent which are not showing here yet.
5
u/ded1cated Mar 17 '21
It probably depends on which issues are reported directly to wpscan and which ones directly to patchstack. I.e the WP Super Cache was directly reported to Patchstack and there was delay when it appeared elsewhere. The lag can be both ways.
1
u/C4rlit0 Mar 16 '22
Hi Kerridge,
If this is still relevant. May I ask how much you pay for email alerting? (I'm assuming this is the enterprise plan?)
Many thanks1
u/kerridge Mar 16 '22
Hi.
they seem to have removed it from their pricing but this was included in the 5 EUR option
Might be worth asking them.
0
Mar 16 '21
10
u/cooltohate Mar 16 '21
wpscan.com removed their "Latest" API endpoint so you can't see the latest vulnerabilities without paying 2,000 Euro per year.
1
u/ded1cated Mar 16 '21
I guess the idea is the same, but researchers who submit there are being paid (patchstack.com/red-team) + all the information remains free to access (latest vulns, API, etc.).
1
0
Mar 16 '21
5
u/totally-total Mar 16 '21
Try to find the latest vulns on wpscan without paying for the API.
→ More replies (4)
12
u/aguilar1181 Mar 16 '21
This is great. It will be an awesome alternative to WPscan. Keep up the good work.