Title: VulnDex Beacon Author: VulnDex Published: 18. november, 2025 Last modified: 17. august, 2026 --- Søg plugins ![](https://ps.w.org/vulndex-beacon/assets/banner-772x250.png?rev=3398290) ![](https://ps.w.org/vulndex-beacon/assets/icon-256x256.png?rev=3398290) # VulnDex Beacon Af [VulnDex](https://profiles.wordpress.org/vulndex/) [Download](https://downloads.wordpress.org/plugin/vulndex-beacon.1.0.3.zip) * [Detaljer](https://da.wordpress.org/plugins/vulndex-beacon/#description) * [Vurderinger](https://da.wordpress.org/plugins/vulndex-beacon/#reviews) * [Installation](https://da.wordpress.org/plugins/vulndex-beacon/#installation) * [Udvikling](https://da.wordpress.org/plugins/vulndex-beacon/#developers) [Support](https://wordpress.org/support/plugin/vulndex-beacon/) ## Beskrivelse VulnDex Beacon connects your WordPress site to an existing [VulnDex](https://vulndex.at/) account. It reports the installed WordPress core, plugin, and theme versions so VulnDex can identify relevant known vulnerabilities and keep the site’s component inventory current. [VulnDex](https://vulndex.at/) is a team-oriented vulnerability management platform. It brings vulnerability and inventory data into a shared view where affected components can be assigned to responsible teams and remediation progress can be coordinated. The Beacon is an inventory connector. It does not scan files, database content, or traffic; patch vulnerable components; block attacks; or replace a vulnerability scanner, firewall, or other security controls. #### Features * Reports the WordPress core version and installed plugins and themes, including their versions and activation status. * Schedules synchronization every two hours through WP-Cron. * Schedules additional reports after plugin or theme changes and WordPress update operations. * Provides a manual send action and the latest connection status under Settings > VulnDex Beacon. * Uses a unique Node ID to identify the WordPress site in VulnDex. * Sends authenticated requests to a fixed VulnDex API endpoint over HTTPS. * Enables reported versions to be viewed with relevant vulnerability information, team assignments, and version history in VulnDex. #### Requirements * WordPress 5.8 or later. * PHP 7.4 or later. * A VulnDex account with a Beacon integration and API key. * Outbound HTTPS access to `api.vulndex.at`. * A working WP-Cron setup for scheduled reports. ### External Service and Privacy This plugin connects to VulnDex, an external vulnerability management service. The service is required to receive the reported inventory, correlate versions with known vulnerability information, and display the results in VulnDex. A VulnDex account and API key are required to use these features. No request is sent to VulnDex until a non-empty API key has been saved. Once configured, the plugin sends reports: * On the recurring two-hour WP-Cron schedule. Actual timing depends on WordPress cron execution and site traffic. * Shortly after an API key is added or changed. * After plugin activation or deactivation, a theme switch, or a WordPress update operation. * When an administrator manually starts a report. Reports are sent by HTTPS POST to `https://api.vulndex.at/beacon/wordpress`. The API key is included as a Bearer credential in the Authorization header. The report payload contains: * A randomly generated Node ID that identifies the site in VulnDex. * WordPress and PHP versions. * Site URL and home URL. * Installed plugin path, slug/text domain, name, version, and activation status. * Installed theme stylesheet identifier, name, version, and activation status. * Operating-system and host/kernel information returned by PHP’s `php_uname()` function, when available. The report payload does not include WordPress user accounts, posts, pages, comments, media, passwords, database content, or file contents. As with any HTTPS request, the receiving server may also process connection metadata such as the server’s public IP address and request time. Learn more about the [VulnDex Beacon service](https://vulndex.at/de/platform/beacon), the [VulnDex Privacy Policy](https://vulndex.at/privacy), and the [provider details](https://vulndex.at/imprint). ### License VulnDex Beacon is free software licensed under GPLv2 or later. You may redistribute or modify it under the terms of the GNU General Public License as published by the Free Software Foundation. ## Installation 1. Install VulnDex Beacon from the WordPress plugin directory, or upload it to `/wp- content/plugins/vulndex-beacon`. 2. Activate the plugin. Activation creates a unique Node ID and schedules the recurring WP-Cron event; it does not send data without an API key. 3. Create a WordPress Beacon integration in VulnDex and obtain its API key. See the [VulnDex Beacon documentation](https://vulndex.at/docs/10-vulndex-docs/127-beacon). 4. In WordPress, go to Settings > VulnDex Beacon, enter the API key, and save the settings. 5. Check the latest API status or use Send data manually to verify the connection. ## FAQ ### Is a VulnDex account required? Yes. The plugin requires an API key for a WordPress Beacon integration in VulnDex. Without an API key, the plugin stores its local Node ID and schedule but does not contact the VulnDex API. ### Does the plugin scan or protect my site? No. VulnDex Beacon reports component and system inventory. It does not inspect files or traffic, detect malware, apply updates, block attacks, or replace other security controls. ### What happens to the reported versions? VulnDex uses the inventory to show relevant known vulnerabilities and maintain the current version state. Within VulnDex, Beacon data can be assigned to teams or products and version changes can be reviewed over time. ### How often does synchronization run? The recurring report is scheduled every two hours with WP-Cron. Reports are also scheduled after relevant plugin, theme, or update events, and administrators can start one manually. Because WP-Cron is traffic-driven by default, the exact time may vary on low-traffic sites. ### Does the plugin send WordPress content or user data? The application payload does not include WordPress user accounts, posts, pages, comments, media, database content, or file contents. It does include the technical inventory, URLs, identifiers, and system information listed in the External Service and Privacy section. ### What happens when I deactivate or uninstall the plugin? Deactivation removes the plugin’s scheduled events but retains its local configuration. Uninstallation deletes the locally stored API key, Node ID, and latest connection status. Data already stored by VulnDex is not deleted automatically; contact your organization’s VulnDex administrator to remove it. ### Where can I get help? See the [VulnDex documentation](https://vulndex.at/docs/) or use the [WordPress.org support forum](https://wordpress.org/support/plugin/vulndex-beacon/). ## Anmeldelser Der er ingen anmeldelser for denne widget. ## Bidragsydere & udviklere “VulnDex Beacon” er open source-software. Følgende personer har bidraget til dette plugin. Bidragsydere * [ VulnDex ](https://profiles.wordpress.org/vulndex/) [Oversæt “VulnDex Beacon” til dit eget sprog.](https://translate.wordpress.org/projects/wp-plugins/vulndex-beacon) ### Interesseret i udvikling? [Gennemse koden](https://plugins.trac.wordpress.org/browser/vulndex-beacon/), tjek [SVN repository](https://plugins.svn.wordpress.org/vulndex-beacon/), eller abonner på [udviklerloggen](https://plugins.trac.wordpress.org/log/vulndex-beacon/) via [RSS](https://plugins.trac.wordpress.org/log/vulndex-beacon/?limit=100&mode=stop_on_copy&format=rss). ## Ændringslog #### 1.0.3 * Updated the WordPress compatibility declaration to 7.1. * Expanded the plugin documentation, FAQ, and external-service disclosure. #### 1.0.2 * Updated the WordPress compatibility declaration to 7.0. * Adjusted the recurring two-hour schedule definition. #### 1.0.1 * Updated the WordPress compatibility declaration to 6.9. * Updated the official VulnDex website and privacy links. #### 1.0.0 * Initial release. * Added automatic reporting for WordPress core, plugins, and themes. * Added the two-hour sync schedule. * Added the connection status and manual send action. ## Meta * Version **1.0.0** * Senest opdateret **2 uger siden** * Aktive installationer **Færre end 10** * WordPress-version ** 5.8 eller højere ** * Testet op til **7.1** * PHP-version ** 7.4 eller højere ** * Sprog * [English (US)](https://wordpress.org/plugins/vulndex-beacon/) * Tags * [inventory](https://da.wordpress.org/plugins/tags/inventory/)[monitoring](https://da.wordpress.org/plugins/tags/monitoring/) [security](https://da.wordpress.org/plugins/tags/security/)[vulnerability](https://da.wordpress.org/plugins/tags/vulnerability/) * [Avanceret visning](https://da.wordpress.org/plugins/vulndex-beacon/advanced/) ## Bedømmelser Der er endnu ikke indsendt nogen anmeldelser. [Din anmeldelse](https://wordpress.org/support/plugin/vulndex-beacon/reviews/#new-post) [Se alle anmeldelser](https://wordpress.org/support/plugin/vulndex-beacon/reviews/) ## Bidragsydere * [ VulnDex ](https://profiles.wordpress.org/vulndex/) ## Support Har du noget at sige? Har du brug for hjælp? [Vis supportforum](https://wordpress.org/support/plugin/vulndex-beacon/)