Vulnerabilities
List Site Vulnerabilities
Returns a merged inventory of known vulnerabilities affecting the specified site. Sources include Patchstack (when the addon is enabled) and Wordfence (always available). Ignored entries are excluded by default. Requires…
Get Site Vulnerability Count by Severity
Returns severity-grouped vulnerability counts (critical/high/medium/low) for the site, plus a combined total and the skipped (ignored) count. Counts come from a single source — Patchstack is preferred over Wordfence (never…
Team-Wide Vulnerability Rollup
Aggregates vulnerabilities across every site in the current team. Each item includes a site context object. Ideal for fleet audits. Ignored entries are excluded by default. Requires the read:sites scope.
Trigger Vulnerability Rescan
Queues an asynchronous WordPress item refresh and recomputes Wordfence vulnerability matches for the site. Returns 202 — completion is asynchronous. After scanning, poll GET /sites/{uuid}/vulnerabilities to see updated results. Requires…
Ignore Vulnerability
Marks a single vulnerability (Wordfence or Patchstack source) as ignored for this site. Ignored entries are hidden from default listings. Idempotent — re-ignoring an already-ignored entry still returns 200. Requires…
Unignore Vulnerability
Clears the ignored flag on a single vulnerability for this site. Idempotent. Requires the write:sites scope and the site:manage-update team permission.
