wpscan-vuln

Retrieve WPScan vulnerability details by ID or slug for WordPress triage.

Updated Mar 19, 2026
One-click install
npx skills add https://github.com/sjinks/ai-wp-vulnerability-triage --skill wpscan-vuln
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wpscan-vuln
Source: https://github.com/sjinks/ai-wp-vulnerability-triage/tree/main/.agents/skills/wpscan-vuln
Command: npx skills add https://github.com/sjinks/ai-wp-vulnerability-triage --skill wpscan-vuln

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

WPScan vulnerability data is necessary for effective WordPress security triage. This skill retrieves comprehensive vulnerability metadata such as IDs, CVEs, severities, affected and fixed versions, and references to aid remediation planning and risk assessment.

Core Features & Use Cases

  • Look up a vulnerability by WPScan ID to obtain its title, CVE references, severity, affected_versions, and fixed_in data for precise remediation.
  • Discover candidate vulnerability IDs by plugin, theme, or WordPress core version to seed investigations when the exact ID is not known.
  • Generate concise summaries and reports with references to support vulnerability triage, risk assessment, and remediation planning.

Quick Start

Identify a vulnerability by its WPScan ID and run the lookup to fetch its full details.

Frequently Asked Questions about wpscan-vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I look up a WordPress plugin vulnerability by its WPScan ID?

To look up a WordPress plugin vulnerability by its WPScan ID, provide the ID to retrieve comprehensive metadata including CVE references, severity, affected versions, and fixed_in data for precise remediation planning.

What WordPress security data do I need to triage a plugin vulnerability?

Triage a plugin vulnerability requires WordPress security data like CVE references, severity levels, affected versions, and fixed_in version numbers. This skill retrieves these details from WPScan to support informed risk assessment and remediation.

Can I find unknown WordPress vulnerability IDs using just a plugin slug?

Yes, you can discover candidate vulnerability IDs by providing a plugin, theme, or WordPress core version slug. This seeds investigations when the exact WPScan vulnerability ID is not initially known.

Do I need a WPScan API token to retrieve vulnerability details?

Yes, you need a WPScan API token to retrieve vulnerability details. The skill requires this token to handle authentication and gracefully manage errors when fetching WordPress plugin, theme, or core vulnerability data.

How do I generate a vulnerability report for WordPress core security issues?

Generate a vulnerability report for WordPress core security issues by retrieving vulnerability metadata from WPScan. The skill produces concise summaries with references to support triage, risk assessment, and remediation planning.