內容簡介
Kistn API Client 外掛可收集已安裝的外掛、佈景主題及 WordPress 核心,並將清單推送至 Kistn 伺服器,以進行集中式的漏洞監控,確保網站安全。
【主要功能】
• 收集已安裝的外掛與佈景主題資訊
• 透過 WPScan 查詢漏洞資料庫
• 支援私有套件的追蹤與管理
• 自動推送漏洞發現與建議快照
• 簡易設定與配置選項
外掛標籤
開發者團隊
原文外掛簡介
Collects installed plugins, themes, and WordPress core, then pushes inventory to your Kistn server for centralized vulnerability monitoring.
Push flow:
Preflight — asks the server which slugs need a fresh advisory check and which are known-private.
Hash check — skips push if inventory unchanged.
WPScan lookup — queries the WPScan vulnerability database only for stale, non-private slugs.
Push — sends packages, vulnerability findings, advisory snapshots, and any newly-discovered private slugs.
Private packages (those absent from the WPScan database) are tracked server-side so subsequent runs never waste WPScan quota on them. When the server later confirms a package is public, the project owner is notified.
Configuration via Settings → Kistn, or via constants in wp-config.php:
define( ‘KISTN_BASE_URL’, ‘https://your-server.example.com’ );
define( ‘KISTN_PROJECT_ID’, ‘your-project-uuid’ );
define( ‘KISTN_TOKEN’, ‘your-api-token’ );
define( ‘KISTN_WPSCAN_TOKEN’, ‘your-wpscan-api-token’ ); // optional, enables vulnerability lookups
External services
This plugin can connect to WPScan API to obtain latest security information about your installation. Use of this feature is optional. To use this feature, you need a WPScan account and your own API token.
When the feature is used, this plugin sends information about installed WordPress core, plugins and themes to retrieve latest security advisories about your installed components. The service is provided by “WPScan”: https://wpscan.com/terms/, https://automattic.com/privacy/.
