WPScan — API

WPScan WordPress Vulnerability Database APIv3.0 Read the vendor's spec ↗

12 endpoints
1 version archived since Jul 20, 2026
Last checked Jul 31, 2026

Description: ----------- The WPScan WordPress Vulnerability Database API is provided for users and developers to make use of our vulnerability database data.

first call

$ curl "https://wpscan.com/api/v3/status"

Base URL: https://wpscan.com/api/v3/
Authenticate: No authentication declared in the spec
Shape: GET11
POST1

What it covers

Enterprise 8 Enterprise only
Plugins 1 Plugin vulnerabilities
Status 1 Get a user's plan status
Themes 1 Theme vulnerabilities
Wordpresses 1 WordPress vulnerabilities

Open an endpoint for a runnable command, its inputs and what it returns.

Enterprise 8

GET /all/latest Get last 20 vulnerabilities from database

Loading…
GET /plugins/latest Get last 20 Plugin vulnerabilities from database

Loading…
GET /plugins/{slug}/{version} Get plugin vulnerabilities by plugin slug filtered by version

Loading…
GET /themes/latest Get last 20 Theme vulnerabilities from database

Loading…
GET /themes/{slug}/{version} Get theme vulnerabilities by theme slug filtered by version

Loading…
GET /vulnerabilities/{id} Get a single vulnerability by its ID

Loading…
GET /wordpresses/latest Get last 20 WordPress vulnerabilities from database

Loading…
POST /batch Batch requests

Loading…

Plugins 1

GET /plugins/{slug} Get plugin vulnerabilities by plugin slug

Loading…

Status 1

GET /status Get the user's plan status

Loading…

Themes 1

GET /themes/{slug} Get theme vulnerabilities by theme slug

Loading…

Wordpresses 1

GET /wordpresses/{version} Get WordPress vulnerabilities by WordPress version

Loading…