{"id":401324,"date":"2026-11-10T18:52:52","date_gmt":"2026-11-10T18:52:52","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/hackindex-ladon\/"},"modified":"2026-11-10T18:52:42","modified_gmt":"2026-11-10T18:52:42","slug":"hackindex-ladon","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/hackindex-ladon\/","author":23601900,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.1","stable_tag":"1.0.1","tested":"7.1.4","requires":"5.2","requires_php":"7.2","requires_plugins":null,"header_name":"HackIndex Ladon","header_author":"HackIndex","header_description":"Know the moment a plugin, theme or WordPress version on your site has a known vulnerability, and when the fix is out. Alerts by email, Slack, Microsoft Teams or webhook.","last_updated":"2026-11-10 18:52:42","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/ladon.hackindex.io\/docs\/projects#sites","header_author_uri":"https:\/\/hackindex.io","rating":0,"author_block_rating":0,"active_installs":0,"downloads":34,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.1":{"tag":"1.0.1","author":"hackindex","date":"2026-11-10 18:52:42","revision":3795054}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3795054,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3795054,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3795054,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3795054,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3795054,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3795054,"resolution":"1","location":"assets","locale":"","width":2560,"height":1682},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3795054,"resolution":"2","location":"assets","locale":"","width":2560,"height":1682}},"screenshots":{"1":"Settings \u2192 Ladon on a connected site: the team, the plan, what is watched and how many components have a known vulnerability.","2":"Connecting a site takes three steps: sign in, pick a team and confirm."}},"plugin_section":[],"plugin_tags":[250388,5603,600,2550,41325],"plugin_category":[54],"plugin_contributors":[291913],"plugin_business_model":[],"class_list":["post-401324","plugin","type-plugin","status-publish","hentry","plugin_tags-cve","plugin_tags-monitoring","plugin_tags-security","plugin_tags-updates","plugin_tags-vulnerabilities","plugin_category-security-and-spam-protection","plugin_contributors-hackindex","plugin_committers-hackindex"],"banners":{"banner":"https:\/\/ps.w.org\/hackindex-ladon\/assets\/banner-772x250.png?rev=3795054","banner_2x":"https:\/\/ps.w.org\/hackindex-ladon\/assets\/banner-1544x500.png?rev=3795054","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/hackindex-ladon\/assets\/icon.svg?rev=3795054","icon":"https:\/\/ps.w.org\/hackindex-ladon\/assets\/icon.svg?rev=3795054","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/hackindex-ladon\/assets\/screenshot-1.png?rev=3795054","caption":"Settings \u2192 Ladon on a connected site: the team, the plan, what is watched and how many components have a known vulnerability."},{"src":"https:\/\/ps.w.org\/hackindex-ladon\/assets\/screenshot-2.png?rev=3795054","caption":"Connecting a site takes three steps: sign in, pick a team and confirm."}],"raw_content":"<!--section=description-->\n<p>Ladon reports which plugins, themes and core version run on this site to your Ladon account at ladon.hackindex.io. Ladon matches them against the Wordfence vulnerability feed and alerts your team when a component you run has a known vulnerability. Premium plugins and themes that are not on wordpress.org are matched the same way.<\/p>\n\n<p>The plugin only talks outward. It registers no public REST routes, and the Ladon server never reaches back to your site.<\/p>\n\n<p><strong>What is sent<\/strong><\/p>\n\n<ul>\n<li>WordPress core version and PHP version<\/li>\n<li>The slug, version and active state of each installed plugin<\/li>\n<li>The slug, version and active state of each installed theme<\/li>\n<li>The site URL and name<\/li>\n<\/ul>\n\n<p>Nothing is sent before you connect. On disconnect the site token is removed.<\/p>\n\n<p><strong>When it is sent<\/strong><\/p>\n\n<ul>\n<li>When a plugin is activated, deactivated or updated<\/li>\n<li>When a theme is switched<\/li>\n<li>Once a day as a heartbeat<\/li>\n<\/ul>\n\n<p>An unchanged inventory is skipped, so a quiet site sends almost nothing.<\/p>\n\n<p><strong>External service<\/strong><\/p>\n\n<p>This plugin connects your site to Ladon, a service operated by HackIndex at <a href=\"https:\/\/ladon.hackindex.io\">ladon.hackindex.io<\/a>. It is required for the plugin to function: the plugin reports the inventory listed above and reads back this site's status. The service matches the versions against a vulnerability feed and notifies your team. All processing happens on the Ladon side; the plugin only reports and reads.<\/p>\n\n<p>Data is sent to <code>https:\/\/ladon.hackindex.io\/api\/v1<\/code> only after an administrator connects the site, and only the data listed above. The site is never contacted from the Ladon side.<\/p>\n\n<ul>\n<li>Terms of service: <a href=\"https:\/\/ladon.hackindex.io\/terms\">ladon.hackindex.io\/terms<\/a><\/li>\n<li>Privacy policy: <a href=\"https:\/\/account.hackindex.io\/privacy\">account.hackindex.io\/privacy<\/a><\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate the plugin.<\/li>\n<li>Go to Settings \u2192 Ladon in wp-admin.<\/li>\n<li>Click Connect to Ladon, sign in with your Ladon account, pick a team and confirm.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20ladon%20scan%20my%20site%3F\"><h3>Does Ladon scan my site?<\/h3><\/dt>\n<dd><p>No. The server never reaches your site. The plugin reports the installed versions and Ladon matches them against its vulnerability feed.<\/p><\/dd>\n<dt id=\"is%20my%20data%20sent%20anywhere%20before%20i%20connect%3F\"><h3>Is my data sent anywhere before I connect?<\/h3><\/dt>\n<dd><p>No. Nothing leaves the site until an administrator connects it to a Ladon team.<\/p><\/dd>\n<dt id=\"how%20do%20i%20stop%20it%3F\"><h3>How do I stop it?<\/h3><\/dt>\n<dd><p>Disconnect under Settings \u2192 Ladon, or deactivate the plugin. Disconnecting revokes the site token.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>First release on WordPress.org.<\/li>\n<li>The plugin and author links point to their own pages.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>First release: connect flow, inventory reporting and daily heartbeat.<\/li>\n<\/ul>","raw_excerpt":"Know the moment a plugin, theme or WordPress version on your site has a known vulnerability, and when the fix is out.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/401324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=401324"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/hackindex"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=401324"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=401324"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=401324"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=401324"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=401324"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=401324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}