[wordpress插件] Bang Vulnerability Scanner爆炸漏洞扫描程序

This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.

此插件在“工具”部分下添加了一个管理页面，该页面报告您的WordPress版本以及所有已安装的主题或插件中的任何已知漏洞。

This information is only visible to administrators (or more precisely, those with the manage_options capability).

此信息仅对管理员（或更准确地说，是具有 manage_options 功能的管理员）可见。

Subscribers, authors and editors cannot see the data.

订阅者，作者和编辑者看不到数据。

Source

来源

The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/.

此插件使用的信息来自WPScan漏洞数据库：https://wpvulndb.com/。

It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.

它使用缓存和内部限制来确保对API的使用不会过多或滥用。

Note

注意

Using this plugin does not guarantee that your site has no vulnerabilities.

使用此插件不能保证您的网站没有漏洞。

It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security.

它还不会免除您作为网站所有者的责任，以其他方式（例如SSL或主机安全性）保护您的网站。

This plugin is only a tool;

这个插件只是一个工具；

using it responsibly is up to you.

负责任地使用它取决于您。

WP-CLI

WP-CLI

This plugin registers a WP-CLI command, that allows you to scan from the command line.

此插件注册WP-CLI命令，使您可以从命令行进行扫描。

The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).

响应代码与Nagios兼容（1代表严重错误，2代表警告，3代表未知）。

• wp vuln scan, to report all known vulnerabilities.
• wp漏洞扫描，以报告所有已知漏洞。

• wp vuln plugins, to report only vulnerabilities in plugins.
• wp vuln插件，仅报告插件中的漏洞。

• wp vuln themes, to report only vulnerabilities in themes.
• wp vuln主题，仅报告主题中的漏洞。

• wp vuln wp, to report only vulnerabilities in WordPress core.
• wp vuln wp ，仅报告WordPress核心中的漏洞。

• wp vuln details, to show a more detailed output on known vulnerabilities.
• wp漏洞详细信息，以显示有关已知漏洞的更详细的输出。

• wp vuln clear, to clear the internal cache of vulnerability data.

• wp vuln clear ，以清除漏洞数据的内部缓存。

  This will result in making extra requests to the API, and is probably not needed.

这将导致对API的额外请求，并且可能不需要。