https://github.com/cydave/wphash-vuln-data

WordPress vulnerability data
https://github.com/cydave/wphash-vuln-data

security security-advisories security-audit vulnerabilities wordpress wordpress-plugin wordpress-theme

Last synced: 5 days ago
JSON representation

WordPress vulnerability data

• Host: GitHub
• URL: https://github.com/cydave/wphash-vuln-data
• Owner: cydave
• Created: 2022-09-03T17:49:50.000Z (about 2 years ago)
• Default Branch: master
• Last Pushed: 2022-11-26T09:08:41.000Z (almost 2 years ago)
• Last Synced: 2023-05-11T18:45:31.317Z (over 1 year ago)
• Topics: security, security-advisories, security-audit, vulnerabilities, wordpress, wordpress-plugin, wordpress-theme
• Language: Python
• Homepage:
• Size: 2.8 MB
• Stars: 8
• Watchers: 4
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# wpha.sh - Vulnerability Data

This repo contains WordPress and eco-system related vulnerability data.

All advisories are stored as individual files in this repository. They are

formatted in the [Open Source Vulnerability (OSV) format](https://ossf.github.io/osv-schema/).

The database is free and open source and is a tool for and by the community.

Submit pull requests to help improve our database of vulnerability information

for all.

## Quality / State of the data

This repo includes both user contributed and publicly available vulnerability

data and as such varies in both accuracy and quality. The affected version

numbers are unfortunately quite a pain to get right, if you stumble upon

invalid data feel free to contribute!

## Contributing

+ Spot a `FIXME` or `TODO` inside an advisory file? Try and FIX it! :)

+ The `summary` field should follow the format: `{plugin name} < {fixed version} [Unauthenticated|] `

+ Ensure new advisory files are validated against the [OSV's JSON schema](utils/schema.json)

## FAQ

TODO