Support » Plugin: WPScan - WordPress Security Scanner » Daily API limit exceeded after first scan?

  • Resolved menathor

    (@menathor)


    Hi guys,

    Is there an API call made for each individual plugin? And are calls made for each plugin on every scan, or only plugins that have been updated since the last scan?

    I’ve got a development site with a lot of plugins installed and I hit the API limit on the first scan. I’m hoping that subsequent scans will only check plugins which have changed version number since the last scan.

    Cheers!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author FireFart

    (@xfirefartx)

    Hi,
    yes it’s for every plugin as there can be new vulnerabilities. Otherwise new vulnerbilities for plugins already checked where the vuln was not yet in our database would not be shown.

    Hi,

    I think it would be much more honest, to say that this is a premium plugin, i.e. you must pay if you want to use it in a production server.

    I have only 15 plugins installed, and just after scanning the first five, it stops saying: “You hit our free API usage limit.”

    Just a waste of time…..

    Regards

    Plugin Author FireFart

    (@xfirefartx)

    Hi Roberto,
    currently there is an API limit of 50 requests per API key per day. This should be enough for a normal site for a daily scan. There is one request for the wordpress version, one for every theme and one for every plugin. After you enter an API key, a scan is scheduled automatically. Maybe you scanned a second time and thus hit the limit.

    currently there is an API limit of 50 requests per API key per day. This should be enough for a normal site for a daily scan. There is one request for the wordpress version, one for every theme and one for every plugin. After you enter an API key, a scan is scheduled automatically. Maybe you scanned a second time and thus hit the limit.

    No, is not enough, my site has 20 plugins and it did 168 request.

    • This reply was modified 7 months, 1 week ago by dieppon.
Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Daily API limit exceeded after first scan?’ is closed to new replies.