Plugin vulnerability command

WP-CLI command to check active WordPress plugins against the Wordfence Intelligence V3 vulnerability feed.

Requirements

• WP-CLI
• WordPress site context
• WORDFENCE_API_KEY environment variable

Installation

wp package install https://github.com/szepeviktor/plugin-vulnerability.git

Usage

WORDFENCE_API_KEY="<your Wordfence v3 API key>" wp plugin vuln

Register a free account: https://www.wordfence.com/sign-in/?action=register

Notes

• The command checks active plugins only.
• It fails fast on feed/schema mismatches and unmatched active plugin slugs.