WP-CLI Auditor: Triage Wordfence RSS Advisories Against Installed Plugins

import Tabs from ' @theme /Tabs'; import TabItem from ' @theme /TabItem'; I built a WordPress plugin that adds wp wordfence-audit plugins and flags installed plugins that match vulnerability signals from the current Wordfence blog RSS feed. The goal is quick triage from existing RSS workflows, not replacing full vulnerability databases. The Problem Security teams often receive Wordfence weekly advisories first, but still need a fast way to answer: "Do we run any of these plugins, and is our installed version inside an affected range?" Without CLI automation, this becomes manual spreadsheet work across many sites. The Solution The plugin fetches RSS items, extracts plugin slugs from WordPress.org links, parses version constraints, and compares against installed plugin versions. flowchart LR A[wp wordfence-audit plugins] --> B[Fetch Wordfence RSS feed] B --> C[Parse item HTML content] C --> D[Extract plugin slug from wordpress.org URLs] D --> E[Parse version constraints\nup to, <=, less