{"id":394060,"date":"2026-11-01T08:10:01","date_gmt":"2026-11-01T08:10:01","guid":{"rendered":"https:\/\/de.wordpress.org\/plugins\/critical-patch-radar\/"},"modified":"2026-11-01T08:32:15","modified_gmt":"2026-11-01T08:32:15","slug":"syncnet-patch-radar","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/syncnet-patch-radar\/","author":23594530,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.4.0","stable_tag":"1.4.0","tested":"7.1.4","requires":"6.4","requires_php":"8.0","requires_plugins":null,"header_name":"SyncNet Patch Radar","header_author":"SyncNet | Oliver Giesbert","header_description":"Collects critical security vulnerabilities in widely used products (BSI\/CERT-Bund \"critical\", CISA Known Exploited Vulnerabilities, NVD CVSS 9+ reported by the vendor) and shows them on a page with search, vendor filters, shareable alert pages and RSS feeds. No tracking.","assets_banners_color":"6090b9","last_updated":"2026-11-01 08:32:15","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/www.syncnet.de\/sicherheitslage\/","header_author_uri":"https:\/\/www.syncnet.de\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":142,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.3.0":{"tag":"1.3.0","author":"syncnetolivergiesbert","date":"2026-11-01 08:09:36","revision":3777670},"1.4.0":{"tag":"1.4.0","author":"syncnetolivergiesbert","date":"2026-11-01 08:32:15","revision":3777693}},"upgrade_notice":{"1.4.0":"<p>Choose where the subscription box and the share buttons appear.<\/p>","1.3.0":"<p>First public release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3777670,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3777670,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3777670,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3777670,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3777670,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.3.0","1.4.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3777670,"resolution":"1","location":"assets","locale":"","width":1280,"height":1560},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3777670,"resolution":"2","location":"assets","locale":"","width":1280,"height":1200},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3777670,"resolution":"3","location":"assets","locale":"","width":1280,"height":1040}},"screenshots":{"1":"List with search, vendor filters and grouped products","2":"Single alert with source and share buttons","3":"Settings with status and CVE check tool"}},"plugin_section":[],"plugin_tags":[250388,23402,850,600,41325],"plugin_category":[54],"plugin_contributors":[289997],"plugin_business_model":[],"class_list":["post-394060","plugin","type-plugin","status-publish","hentry","plugin_tags-cve","plugin_tags-patch","plugin_tags-rss","plugin_tags-security","plugin_tags-vulnerabilities","plugin_category-security-and-spam-protection","plugin_contributors-syncnetolivergiesbert","plugin_committers-syncnetolivergiesbert"],"banners":{"banner":"https:\/\/ps.w.org\/syncnet-patch-radar\/assets\/banner-772x250.png?rev=3777670","banner_2x":"https:\/\/ps.w.org\/syncnet-patch-radar\/assets\/banner-1544x500.png?rev=3777670","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/syncnet-patch-radar\/assets\/icon.svg?rev=3777670","icon":"https:\/\/ps.w.org\/syncnet-patch-radar\/assets\/icon.svg?rev=3777670","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/syncnet-patch-radar\/assets\/screenshot-1.png?rev=3777670","caption":"List with search, vendor filters and grouped products"},{"src":"https:\/\/ps.w.org\/syncnet-patch-radar\/assets\/screenshot-2.png?rev=3777670","caption":"Single alert with source and share buttons"},{"src":"https:\/\/ps.w.org\/syncnet-patch-radar\/assets\/screenshot-3.png?rev=3777670","caption":"Settings with status and CVE check tool"}],"raw_content":"<!--section=description-->\n<p>SyncNet Patch Radar collects security alerts automatically and shows <strong>only what really matters<\/strong>: critical vulnerabilities in widely used products such as Windows, Exchange, NetScaler, FortiGate, Cisco, VMware, Java, Chrome or PHP.<\/p>\n\n<p>An alert is shown when it<\/p>\n\n<ul>\n<li>is rated <strong>critical<\/strong> by the German Federal Office for Information Security (BSI \/ CERT-Bund), or<\/li>\n<li>is listed by the US agency <strong>CISA as actively exploited<\/strong> (Known Exploited Vulnerabilities), or<\/li>\n<li>is rated <strong>CVSS 9.0 or higher<\/strong> (adjustable), exploitable over the network without authentication, and was <strong>reported by the vendor itself<\/strong> (NVD),<\/li>\n<\/ul>\n\n<p><strong>and<\/strong> concerns one of the products in your list (fully editable).<\/p>\n\n<h4>Features<\/h4>\n\n<ul>\n<li>Clean list with search (\"Am I affected?\") and vendor filters<\/li>\n<li>Several critical vulnerabilities in the same product are combined into one card (\"Google Chrome: 12 critical vulnerabilities\") \u2013 one update usually fixes them all<\/li>\n<li>Every alert and product group has its own page to share (LinkedIn, WhatsApp, Teams, email, copy link, native share on phones) \u2013 shared links always point to your site<\/li>\n<li>RSS feed for all alerts and one feed per vendor<\/li>\n<li>You choose where the subscription box and the share buttons appear: above, below or both<\/li>\n<li>Source and link to the original record on every card<\/li>\n<li>Optional small red dot on your menu item for the alerts page while a fresh, actively exploited vulnerability is listed (off by default)<\/li>\n<li>Optional one-line \"latest critical alert\" for your front page and a compact box for any page<\/li>\n<li>Optional call to action (\"Not sure whether you are affected? Contact us\")<\/li>\n<li>Check tool in the settings: enter a CVE ID and see which condition is met<\/li>\n<li>No tracking, no cookies, no external scripts or fonts \u2013 visitors never connect to third parties<\/li>\n<li>Nothing is fetched until you switch fetching on in the settings<\/li>\n<li>Translation ready<\/li>\n<\/ul>\n\n<h4>Shortcodes<\/h4>\n\n<ul>\n<li><code>[syncnet_patch_radar]<\/code> \u2013 the list (a draft page with it is created on activation)<\/li>\n<li><code>[syncnet_patch_radar_latest]<\/code> \u2013 one discreet line with the newest alert<\/li>\n<li><code>[syncnet_patch_radar_box count=\"3\"]<\/code> \u2013 compact cards with a link to the list<\/li>\n<\/ul>\n\n<h4>Disclaimer<\/h4>\n\n<p>The list is compiled automatically from public sources. It is no substitute for your own vulnerability management and comes without any guarantee of completeness or correctness.<\/p>\n\n<h3>External services<\/h3>\n\n<p>This plugin relies on the following third-party services. <strong>Nothing is sent on activation.<\/strong> Your server only connects to them after an administrator has ticked \"Fetch alerts\" in <strong>Settings \u2192 SyncNet Patch Radar<\/strong> and saved; it can be switched off there at any time.<\/p>\n\n<h4>Vulnerability data (retrieved by your server)<\/h4>\n\n<p>Once fetching is switched on, your server downloads public vulnerability data hourly via WP-Cron, after saving the settings and when you click \"Fetch now\" \u2013 only from the sources you have selected. The requests contain no data about your visitors, users or site; the user agent only names the plugin and its version. Requests to the NVD contain your NVD API key if you have entered one.<\/p>\n\n<ul>\n<li><strong>BSI \/ CERT-Bund Warn- und Informationsdienst (WID)<\/strong>, Federal Office for Information Security, Germany. Used to show security advisories rated \"critical\". Endpoint: <code>https:\/\/wid.cert-bund.de\/content\/public\/securityAdvisory\/rss<\/code> (only if the BSI source is selected). Service: https:\/\/wid.cert-bund.de\/ \u2013 Privacy policy: https:\/\/www.bsi.bund.de\/EN\/Service\/Datenschutz\/datenschutz_node.html<\/li>\n<li><strong>CISA Known Exploited Vulnerabilities Catalog<\/strong>, Cybersecurity and Infrastructure Security Agency, USA. Used to show vulnerabilities known to be exploited. Endpoint: <code>https:\/\/www.cisa.gov\/sites\/default\/files\/feeds\/known_exploited_vulnerabilities.json<\/code> (only if the CISA source is selected). Privacy policy: https:\/\/www.cisa.gov\/privacy-policy<\/li>\n<li><strong>NIST National Vulnerability Database (NVD) API 2.0<\/strong>, USA. Used to show critical vulnerabilities reported by the vendor, and by the CVE check tool on the settings page (only when you click \"Check\"). Endpoint: <code>https:\/\/services.nvd.nist.gov\/rest\/json\/cves\/2.0<\/code> (only if the NVD source is selected). Terms of use: https:\/\/nvd.nist.gov\/developers\/terms-of-use \u2013 Privacy policy: https:\/\/www.nist.gov\/privacy-policy<\/li>\n<\/ul>\n\n<p>This product uses data from the NVD API but is not endorsed or certified by the NVD.<\/p>\n\n<h4>Share buttons (opened by the visitor)<\/h4>\n\n<p>Alert pages show share buttons. They are plain links; nothing is loaded from these services when the page is displayed. Only when a visitor clicks a button does their browser open the respective service, sending the title and address of the alert page so it can be shared:<\/p>\n\n<ul>\n<li><strong>LinkedIn<\/strong> (LinkedIn Corporation \/ LinkedIn Ireland) \u2013 <code>https:\/\/www.linkedin.com\/sharing\/share-offsite\/<\/code>. User agreement: https:\/\/www.linkedin.com\/legal\/user-agreement \u2013 Privacy policy: https:\/\/www.linkedin.com\/legal\/privacy-policy<\/li>\n<li><strong>WhatsApp<\/strong> (WhatsApp LLC \/ WhatsApp Ireland) \u2013 <code>https:\/\/api.whatsapp.com\/send<\/code>. Terms of service: https:\/\/www.whatsapp.com\/legal\/terms-of-service \u2013 Privacy policy: https:\/\/www.whatsapp.com\/legal\/privacy-policy<\/li>\n<li><strong>Microsoft Teams<\/strong> (Microsoft Corporation) \u2013 <code>https:\/\/teams.microsoft.com\/share<\/code>. Services agreement: https:\/\/www.microsoft.com\/servicesagreement \u2013 Privacy statement: https:\/\/privacy.microsoft.com\/privacystatement<\/li>\n<\/ul>\n\n<p>E-mail and \"copy link\" use the visitor's own mail program and clipboard; no service is contacted.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate the plugin. A <strong>draft<\/strong> page \"Security alerts\" with the shortcode <code>[syncnet_patch_radar]<\/code> is created. Nothing is fetched yet and the plugin never adds menu items itself.<\/li>\n<li>Go to <strong>Settings \u2192 SyncNet Patch Radar<\/strong>, choose sources, CVSS threshold and product list, tick <strong>Fetch alerts<\/strong> and save. The first fetch starts.<\/li>\n<li>Rename and publish the page when you are ready.<\/li>\n<li>Optional but recommended: request a free NVD API key and enter it \u2013 fetching becomes much faster.<\/li>\n<li>Recommended: set up a real cron job calling <code>https:\/\/your-site.example\/wp-cron.php?doing_wp_cron<\/code> every hour, so fetching runs reliably even with page caching.<\/li>\n<\/ol>\n\n<p>The first NVD load covers the last 30 days and runs in several passes (progress is shown in the settings).<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"why%20is%20the%20list%20empty%20after%20activation%3F\"><h3>Why is the list empty after activation?<\/h3><\/dt>\n<dd><p>Nothing is fetched until you switch fetching on: go to Settings \u2192 SyncNet Patch Radar, tick \"Fetch alerts\" and save.<\/p><\/dd>\n<dt id=\"why%20are%20some%20vulnerabilities%20missing%3F\"><h3>Why are some vulnerabilities missing?<\/h3><\/dt>\n<dd><p>Only critical ones in products from your list are shown \u2013 this is intentional. Use the check tool in the settings to see why a specific CVE is not listed.<\/p><\/dd>\n<dt id=\"why%20are%20some%20texts%20in%20english%20or%20german%3F\"><h3>Why are some texts in English or German?<\/h3><\/dt>\n<dd><p>BSI advisories are published in German, CISA and NVD descriptions in English. The plugin's own texts follow your site language.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20slow%20down%20my%20site%3F\"><h3>Does the plugin slow down my site?<\/h3><\/dt>\n<dd><p>No. Data is fetched in the background and stored; pages only read the stored list. Search and filters run in the visitor's browser.<\/p><\/dd>\n<dt id=\"can%20i%20show%20a%20credit%20for%20the%20author%3F\"><h3>Can I show a credit for the author?<\/h3><\/dt>\n<dd><p>Yes, there is an option in the settings. It is off by default.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.4.0<\/h4>\n\n<ul>\n<li>New settings: show the RSS subscription box above and\/or below the list (or not at all), and the share buttons above and\/or below a single alert.<\/li>\n<\/ul>\n\n<h4>1.3.0<\/h4>\n\n<ul>\n<li>First public release.<\/li>\n<\/ul>","raw_excerpt":"Shows only the really critical vulnerabilities in widely used products \u2013 searchable, shareable and as RSS feeds. Data from BSI, CISA and NVD.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/394060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=394060"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/syncnetolivergiesbert"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=394060"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=394060"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=394060"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=394060"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=394060"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=394060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}