Title: CodeMedic SupplyScope Author: adrianmikula Published: ಜುಲೈ 24, 2026 Last modified: ಜುಲೈ 25, 2026 --- ಪ್ಲಗಿನ್‌ಗಳನ್ನು ಹುಡುಕಿ ![](https://ps.w.org/codemedic-supplyscope/assets/banner-772x250.png?rev=3622067) ![](https://ps.w.org/codemedic-supplyscope/assets/icon-256x256.png?rev=3622067) # CodeMedic SupplyScope ‍[adrianmikula](https://profiles.wordpress.org/adrianmikula/) ಮೂಲಕ [ಡೌನ್ಲೋಡ್](https://downloads.wordpress.org/plugin/codemedic-supplyscope.zip) * [ವಿವರಗಳು](https://kn.wordpress.org/plugins/codemedic-supplyscope/#description) * [‍ವಿಮರ್ಶೆಗಳು‍](https://kn.wordpress.org/plugins/codemedic-supplyscope/#reviews) * [ಸ್ಥಾಪನೆ](https://kn.wordpress.org/plugins/codemedic-supplyscope/#installation) * [ಅಭಿವೃದ್ಧಿ](https://kn.wordpress.org/plugins/codemedic-supplyscope/#developers) [ಬೆಂಬಲ](https://wordpress.org/support/plugin/codemedic-supplyscope/) ## ವಿವರಣೆ CodeMedic SupplyScope detects vulnerable Composer packages bundled within your WordPress plugins. Every hour, it scans your active plugins against a continuously updated CVE intelligence feed and displays the results in a clear admin dashboard. Stop guessing which plugins have unpatched vulnerabilities. Get visibility into the hidden dependency chain of every plugin on your site. #### How It Works 1. **Discovery** — Every hour, the plugin scans all active WordPress plugins for bundled Composer dependencies and checks them against our cloud CVE API. 2. **Review** — Detected vulnerabilities are listed in the admin screen with CVE details, severity, and affected library information. 3. **Act** — The plugin reports what’s vulnerable so you can take action — whether that means updating the plugin, replacing it, or applying patches manually. #### Why Dependency Scanning? WordPress plugins often bundle Composer dependencies (Guzzle, Monolog, PHPUnit, etc.) directly in their vendor directory. Plugin authors may not update these dependencies promptly after a CVE is disclosed. Without a scanner, you have no visibility into these hidden risks. Patchstack and Wordfence block exploit attempts at the perimeter. This plugin tells you what’s vulnerable so you can take action — whether that means updating the plugin, replacing it, or applying patches manually. ### External Services This plugin queries several third-party vulnerability databases to detect known CVEs in Composer dependencies bundled by your WordPress plugins. No personally identifiable information is transmitted. Each service is described below. ### OSV.dev What it is: OSV.dev is an open-source vulnerability database maintained by Google. It is used to look up known vulnerabilities in Composer (Packagist) packages. Data sent: Composer package names and version numbers are sent as JSON in a batch query. When: On every scheduled scan and when a manual scan is triggered from the admin dashboard. Terms of Service: https://google.github.io/osv.dev/ Privacy Policy: https://policies. google.com/privacy ### National Vulnerability Database (NVD) What it is: The NVD is a public vulnerability database maintained by NIST (U.S. National Institute of Standards and Technology). It is used to search for CVEs related to WordPress plugins by keyword. Data sent: The WordPress plugin name is sent as a keyword search query parameter. No personal data is transmitted. When: On every scheduled scan and when a manual scan is triggered from the admin dashboard. Terms of Service: https://nvd.nist.gov/developers/terms-of-use Privacy Policy: https://www.nist.gov/privacy-policy Note: This product uses data from the NVD API but is not endorsed or certified by the NVD. ### WPVulnerability.net What it is: WPVulnerability.net is an open-source WordPress vulnerability database. It provides aggregated vulnerability data for WordPress core, plugins, and themes. Data sent: The WordPress plugin slug is sent as part of the API URL path. No personal data is transmitted. When: On every scheduled scan and when a manual scan is triggered from the admin dashboard. Terms of Service: https://www.wpvulnerability.com/license/ Privacy Policy: https:// www.wpvulnerability.com/privacy/ ### WordPress.org Plugin API What it is: The official WordPress.org plugin information API. It is used to retrieve plugin metadata (such as the current stable version and last updated date) to calculate patch velocity metrics. Data sent: The WordPress plugin slug is sent as a query parameter. No personal data is transmitted. When: On every scheduled scan and when a manual scan is triggered from the admin dashboard. Terms of Service: https://wordpress.org/about/privacy/ Privacy Policy: https:// wordpress.org/about/privacy/ ## ಸ್ಕ್ರೀನ್‌ಶಾಟ್‌ಗಳು [⌊The admin screen showing detected vulnerabilities with CVE details.⌉⌊The admin screen showing detected vulnerabilities with CVE details.⌉[ The admin screen showing detected vulnerabilities with CVE details. ## ಸ್ಥಾಪನೆ 1. Upload the `codemedic-supplyscope` folder to the `/wp-content/plugins/` directory. 2. Activate the plugin through the ‘Plugins’ menu in WordPress. 3. The plugin begins scanning hourly for vulnerable dependencies. Review findings from Tools > Dep Scanner. ## FAQ ### Does this plugin modify my files? No. The free version is read-only — it scans and reports vulnerabilities but never modifies any files. ### How do I fix the vulnerabilities this plugin finds? Update the affected plugin if a newer version is available, replace it with an alternative, or use the patch history to manually apply fixes. ### Can I use this alongside other security plugins? Yes. This plugin is complementary to firewalls and WAFs. It focuses on visibility into bundled Composer dependencies that other tools don’t inspect. ## ‍ವಿಮರ್ಶೆಗಳು‍ ಈ ಪ್ಲಗಿನ್‌ಗೆ ಯಾವುದೇ ವಿಮರ್ಶೆಗಳಿಲ್ಲ. ## ಕೊಡುಗೆದಾರರು & ಡೆವಲಪರ್‌ಗಳು “CodeMedic SupplyScope” ಓಪನ್ ಸೋರ್ಸ್ ಸಾಫ್ಟ್‌ವೇರ್ ಆಗಿದೆ. ಕೆಳಗಿನ ಜನರು ಈ ಪ್ಲಗಿನ್‌ಗೆ ಕೊಡುಗೆ ನೀಡಿದ್ದಾರೆ. ಕೊಡುಗೆದಾರರು * [ adrianmikula ](https://profiles.wordpress.org/adrianmikula/) [“CodeMedic SupplyScope” ಅನ್ನು ನಿಮ್ಮ ಭಾಷೆಗೆ ಅನುವಾದಿಸಿ.](https://translate.wordpress.org/projects/wp-plugins/codemedic-supplyscope) ### ಅಭಿವೃದ್ಧಿಯಲ್ಲಿ ಆಸಕ್ತಿ ಇದೆಯೇ? [ಕೋಡ್ ಬ್ರೌಸ್ ಮಾಡಿ](https://plugins.trac.wordpress.org/browser/codemedic-supplyscope/), [SVN ರೆಪೊಸಿಟರಿ](https://plugins.svn.wordpress.org/codemedic-supplyscope/) ಪರಿಶೀಲಿಸಿ, ಅಥವಾ [ಅಭಿವೃದ್ಧಿ ಲಾಗ್](https://plugins.trac.wordpress.org/log/codemedic-supplyscope/) ಗೆ [RSS](https://plugins.trac.wordpress.org/log/codemedic-supplyscope/?limit=100&mode=stop_on_copy&format=rss) ಚಂದಾದಾರರಾಗಿ. ## Changelog #### 1.0.0 * Initial release. * Hourly scanning of active plugins for bundled Composer dependencies. * Cloud-based CVE intelligence feed. * Read-only vulnerability dashboard with CVE details and severity. * Patch history log. * Patch history log for audit and manual remediation. ## ಮೆಟಾ * Version **1.0.0** * ಕೊನೆಯದಾಗಿ ನವೀಕರಿಸಿದ್ದು **1 ತಿಂಗಳು ರ ಮುನ್ನ** * ಸಕ್ರಿಯ ಸ್ಥಾಪನೆಗಳು **10 ಕ್ಕಿಂತ ಕಡಿಮೆ** * ವರ್ಡ್ಪ್ರೆಸ್ ಆವೃತ್ತಿ ** 5.8 ಅಥವಾ ಹೆಚ್ಚಿನದು ** * **7.0.4** ವರೆಗೆ ಪರೀಕ್ಷಿಸಲಾಗಿದೆ * PHP ಆವೃತ್ತಿ ** 7.4 ಅಥವಾ ಹೆಚ್ಚಿನದು ** * Language * [English (US)](https://wordpress.org/plugins/codemedic-supplyscope/) * ಟ್ಯಾಗ್‌ಗಳು * [composer](https://kn.wordpress.org/plugins/tags/composer/)[cve](https://kn.wordpress.org/plugins/tags/cve/) [dependencies](https://kn.wordpress.org/plugins/tags/dependencies/)[security](https://kn.wordpress.org/plugins/tags/security/) [vulnerabilities](https://kn.wordpress.org/plugins/tags/vulnerabilities/) * [ಸುಧಾರಿತ ನೋಟ](https://kn.wordpress.org/plugins/codemedic-supplyscope/advanced/) ## ರೇಟಿಂಗ್‌ಗಳು No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/codemedic-supplyscope/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/codemedic-supplyscope/reviews/) ## ಕೊಡುಗೆದಾರರು * [ adrianmikula ](https://profiles.wordpress.org/adrianmikula/) ## ಬೆಂಬಲ ಹೇಳಲು ಏನಾದರೂ ಸಿಕ್ಕಿದೆಯೇ? ಸಹಾಯ ಬೇಕೇ? [ಬೆಂಬಲ ವೇದಿಕೆಯನ್ನು ವೀಕ್ಷಿಸಿ](https://wordpress.org/support/plugin/codemedic-supplyscope/)