Scan-Fakten als JSON anzeigen
{
"schema": "https://saferpage.de/schemas/public-scan-facts.v1",
"claim_boundary": "Öffentliche Rohdaten enthalten nur Scan-Fakten, Statuswerte, Evidence-Grenzen und feste Detail-/Hintergrund-Links. Betreiber-Hintergrund, Planungen, Checklisten, Code und allgemeine Empfehlungen sind ausgelagert.",
"current_evidence_policy": {
"schema": "https://saferpage.de/schemas/public-scan-current-evidence-policy.v1",
"status": "current_scan_fields_only",
"summary": "Der Fakten-JSON exportiert nur Felder, die im gespeicherten aktuellen Scan wirklich vorhanden sind. Fehlende neue Evidence wird nicht aus alten Testergebnisformaten nachgebaut.",
"guardrails": [
"Keine synthetischen Boundary-Fallbacks fuer alte Scans",
"Keine Nachbewertung alter Testergebnisse im Fakten-JSON",
"Keine Betreiber-Empfehlung im Testresult-JSON"
]
},
"host": "deutsche-wordpress-themes.com",
"normalized_url": "https://deutsche-wordpress-themes.com/",
"score": 66,
"verdict": {
"color": "yellow",
"label": "unklar",
"score": 66
},
"scan_id": "6f043eaf-78db-48c8-8d3e-799dcbfde021",
"created_at": "2026-06-14 05:23:11.161632+02",
"evidence": {
"dns": {
"ok": true,
"addresses": [
"54.192.35.113",
"54.192.35.37",
"54.192.35.61",
"54.192.35.69"
],
"duration_ms": 35
},
"tls": {
"ok": true,
"cipher": "TLS_AES_128_GCM_SHA256",
"issuer": [
[
[
"countryName",
"US"
]
],
[
[
"organizationName",
"Amazon"
]
],
[
[
"commonName",
"Amazon RSA 2048 M04"
]
]
],
"subject": [
[
[
"commonName",
"deutsche-wordpress-themes.com"
]
]
],
"version": "TLSv1.3",
"not_after": "Nov 12 23:59:59 2026 GMT",
"hostname_matches": true,
"days_until_expiry": 151,
"subject_alt_names": [
"deutsche-wordpress-themes.com",
"*.deutsche-wordpress-themes.com"
],
"issuer_common_name": "Amazon RSA 2048 M04"
},
"http": {
"ok": true,
"status": 200,
"headers": {
"age": "32341",
"via": "1.1 c683ff121fe088b26b026e31d2d1adce.cloudfront.net (CloudFront)",
"date": "Sat, 13 Jun 2026 18:23:58 GMT",
"etag": "\"569590e9fffedb3ef64697b898f8dc15\"",
"server": "AmazonS3",
"x-cache": "Hit from cloudfront",
"connection": "close",
"x-amz-cf-id": "MkatxxKZM_BPJrCNDW6kqdA6Sp-HIDZ2tJwP-DiXcG6A83SewA7neg==",
"content-type": "text/html",
"x-amz-cf-pop": "FRA56-P15",
"accept-ranges": "bytes",
"last-modified": "Mon, 01 Feb 2021 21:06:56 GMT",
"content-length": "47877",
"x-amz-version-id": "gAQEqlchMDBFEQJu6Zcos7XYXTvPlSVq",
"x-amz-replication-status": "REPLICA",
"x-amz-server-side-encryption": "AES256"
},
"body_size": 47877,
"final_url": "https://www.deutsche-wordpress-themes.com/",
"duration_ms": 377
},
"scanner": {
"bot_url": "https://saferpage.de/bot",
"context": "manual",
"user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)",
"default_user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)"
},
"domain_records": {
"mx": false,
"caa": false,
"spf": false,
"dmarc": false,
"dnssec": false
},
"googlebot_http": {
"ok": true,
"status": 200,
"headers": {
"age": "32341",
"via": "1.1 30871437ed641b91fb10c39754273da0.cloudfront.net (CloudFront)",
"date": "Sat, 13 Jun 2026 18:23:58 GMT",
"etag": "\"569590e9fffedb3ef64697b898f8dc15\"",
"server": "AmazonS3",
"x-cache": "Hit from cloudfront",
"connection": "close",
"x-amz-cf-id": "BWM3iWviYEnp3_3jjCQo9FfT3isqCaCOERL4tH9MSRV_tF9skSRxcg==",
"content-type": "text/html",
"x-amz-cf-pop": "FRA56-P15",
"accept-ranges": "bytes",
"last-modified": "Mon, 01 Feb 2021 21:06:56 GMT",
"content-length": "47877",
"x-amz-version-id": "gAQEqlchMDBFEQJu6Zcos7XYXTvPlSVq",
"x-amz-replication-status": "REPLICA",
"x-amz-server-side-encryption": "AES256"
},
"body_size": 47877,
"final_url": "https://www.deutsche-wordpress-themes.com/",
"duration_ms": 81
},
"ai_search_policy_evidence": {
"files": [
{
"id": "robots_txt",
"url": "https://www.deutsche-wordpress-themes.com/robots.txt",
"label": "robots.txt",
"reason": "",
"status": "found",
"body_size": 58,
"truncated": false,
"body_sha256": "93d80b7b0b44be46e75224fd75114a11ab14b38cbd6ea1494304bde139501da9",
"duration_ms": 68,
"http_status": 200,
"ai_bot_policy": {
"bot_directives": [],
"explicit_ai_bots": [],
"explicit_ai_bot_count": 0,
"wildcard_directive_count": 0,
"wildcard_directives_sample": []
},
"relevant_lines": [
"Sitemap: https://deutsche-wordpress-themes.com/sitemap.xml"
]
},
{
"id": "llms_txt",
"url": "https://www.deutsche-wordpress-themes.com/llms.txt",
"label": "llms.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 387,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
},
{
"id": "ai_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/ai.txt",
"label": "AI Policy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 402,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
},
{
"id": "ai_policy_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/ai-policy.txt",
"label": "AI Policy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 382,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
},
{
"id": "ward_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/ward.txt",
"label": "WARD Policy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 394,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
}
],
"origin": "https://www.deutsche-wordpress-themes.com",
"schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 5,
"found_file_count": 5,
"policy_file_count": 4,
"explicit_ai_bot_count": 0
},
"summary": "5 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
"available": true,
"guardrails": [
"Nur feste Same-Origin-Policy-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"known_ai_bots": [
"GPTBot",
"ChatGPT-User",
"Google-Extended",
"ClaudeBot",
"PerplexityBot",
"CCBot"
],
"explicit_ai_bots": [],
"policy_file_count": 4,
"llms_ward_policy_status": "policy_file_found",
"robots_ai_policy_status": "robots_found_no_ai_bot_policy"
},
"adtech_transparency_evidence": {
"files": [
{
"id": "ads_txt",
"url": "https://www.deutsche-wordpress-themes.com/ads.txt",
"label": "ads.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 395,
"http_status": 200,
"ads_txt_policy": {
"entry_count": 0,
"rows_sample": [],
"direct_count": 0,
"variable_keys": [
"<html lang",
"<script type",
"if(window.location.search.includes('redirect",
"let end",
"let loc",
"let parts",
"let rep",
"let search"
],
"reseller_count": 0,
"variable_count": 12,
"invalid_line_count": 16,
"exchange_domain_count": 0,
"exchange_domains_sample": []
},
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"sellers_json_policy": []
},
{
"id": "app_ads_txt",
"url": "https://www.deutsche-wordpress-themes.com/app-ads.txt",
"label": "app-ads.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 414,
"http_status": 200,
"ads_txt_policy": {
"entry_count": 0,
"rows_sample": [],
"direct_count": 0,
"variable_keys": [
"<html lang",
"<script type",
"if(window.location.search.includes('redirect",
"let end",
"let loc",
"let parts",
"let rep",
"let search"
],
"reseller_count": 0,
"variable_count": 12,
"invalid_line_count": 16,
"exchange_domain_count": 0,
"exchange_domains_sample": []
},
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"sellers_json_policy": []
},
{
"id": "sellers_json",
"url": "https://www.deutsche-wordpress-themes.com/sellers.json",
"label": "sellers.json",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 385,
"http_status": 200,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": {
"parse_ok": false,
"domain_count": 0,
"seller_count": 0,
"passthrough_count": 0,
"confidential_count": 0,
"seller_type_counts": []
}
}
],
"origin": "https://www.deutsche-wordpress-themes.com",
"schema": "https://saferpage.de/schemas/adtech-transparency-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 3,
"direct_count": 0,
"reseller_count": 0,
"found_file_count": 3,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"summary": "3 von 3 AdTech-Transparenzdatei(en) gefunden; 0 DIRECT- und 0 RESELLER-Zeile(n).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-AdTech-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status, Zähler und kurze relevante Zeilen"
],
"direct_count": 0,
"ads_txt_found": true,
"reseller_count": 0,
"app_ads_txt_found": true,
"sellers_json_found": true,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"sellers_json_parse_ok": false,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"security_trust_policy_evidence": {
"files": [
{
"id": "security_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/security.txt",
"label": "security.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 389,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"security_txt_policy": {
"field_count": 0,
"contact_count": 0,
"expires_values": [],
"fields_present": [],
"policy_present": false,
"contact_samples": [],
"expires_present": false,
"canonical_present": false,
"encryption_present": false,
"preferred_languages": []
}
},
{
"id": "security_txt_legacy",
"url": "https://www.deutsche-wordpress-themes.com/security.txt",
"label": "security.txt legacy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 671,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"security_txt_policy": {
"field_count": 0,
"contact_count": 0,
"expires_values": [],
"fields_present": [],
"policy_present": false,
"contact_samples": [],
"expires_present": false,
"canonical_present": false,
"encryption_present": false,
"preferred_languages": []
}
}
],
"origin": "https://www.deutsche-wordpress-themes.com",
"schema": "https://saferpage.de/schemas/security-trust-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 2,
"field_count": 0,
"contact_count": 0,
"found_file_count": 2,
"preferred_well_known_found": 1
},
"summary": "2 von 2 security.txt-Ziel(en) gefunden; 0 Kontaktfeld(er), 0 strukturierte Feld(er).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-security.txt-Ziele",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"field_count": 0,
"contact_count": 0,
"fields_present": [],
"policy_present": false,
"expires_present": false,
"encryption_present": false,
"security_txt_found": true,
"preferred_well_known_found": true
}
},
"findings": [
{
"id": "known_vulnerability_advisory",
"title": "CVE-2011-4899: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2011-4899",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-2399: Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other prod",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-2399",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-2400: Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-2400",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-6707: WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-6707",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-4338: wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by trigger",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-4338",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-4339: WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted strin",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-4339",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-2213: SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-2213",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-2221: Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web s",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-2221",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-4029: WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF prote",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-4029",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5832: The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5832",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5835: WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5835",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5836: The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5836",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5837: WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5837",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5838: WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5838",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5839: WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5839",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-6635: Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-6635",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14719: Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14719",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14723: Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14723",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-16510: WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as d",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-16510",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-17091: wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-17091",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5489: Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5489",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5492: Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of u",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5492",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5493: wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers t",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5493",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5611: SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the pres",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5611",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-9062: In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-9062",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-9064: In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-9064",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-9065: In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-9065",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-9066: In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "critical",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-9066",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-4257: SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands v",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-4257",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-4536: Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary web script or HTML via vectors related to",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-4536",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-5106: The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended acc",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-5106",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-5293: wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restri",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-5293",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-5294: Multiple cross-site scripting (XSS) vulnerabilities in the request_filesystem_credentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to i",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-5294",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-5295: Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-5295",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-5296: wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-5296",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2011-0701: wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_i",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2011-0701",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2011-4898: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on wheth",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2011-4898",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2011-4956: Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2011-4956",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2011-4957: The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attack",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2011-4957",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2011-5270: wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requirement, which allows remote authenticated users to perform publish actions by l",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2011-5270",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-0782: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbit",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-0782",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-0937: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which all",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-0937",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-1936: The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easie",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-1936",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-2401: Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was l",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-2401",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-2402: wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspec",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-2402",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-2403: wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scriptin",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-2403",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-2404: wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-2404",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-3384: Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-3384",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-3385: WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive informatio",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-3385",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-3414: Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-3414",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-4421: The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass in",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-4421",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-6633: Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-6633",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-6634: wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-6634",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-6635: wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitiv",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-6635",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-0235: The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL fo",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-0235",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-0236: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortc",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-0236",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-0237: Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-0237",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-2199: The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) is",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-2199",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-2200: WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reass",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-2200",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-2201: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) uploads of med",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-2201",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-2202: WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity r",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-2202",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-2203: WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the ab",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-2203",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-2204: moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a # (pound sign) charac",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-2204",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-2205: The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, which allows remote attackers to bypass the Same Origin Policy a",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-2205",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-5738: The get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does not require the unfiltered_html capability for uploads of .htm and .html files, whic",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-5738",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-0165: WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-ad",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-0165",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-0166: The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookie",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-0166",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-5204: wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the nonce are incorrect, which makes it eas",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-5204",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-5205: wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote at",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-5205",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-5265: The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion durin",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-5265",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-5266: The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-5266",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-9031: Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitra",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-9031",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-9034: wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consu",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-9034",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-9035: Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arb",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-9035",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-9036: Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web scr",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-9036",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-9037: WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an im",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-9037",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-9038: wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) a",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-9038",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-9039: wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-ma",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-9039",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-3438: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-3438",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-3440: Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that i",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-3440",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5623: WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by lever",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5623",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5714: Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML ele",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5714",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5715: The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access res",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5715",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5730: The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not use a constant-time comparison for widgets, which allows remo",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5730",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5731: Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests t",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5731",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5732: Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers t",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5732",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5733: Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject a",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5733",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5734: Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary w",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5734",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-7989: Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-m",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-7989",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-8834: Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that i",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-8834",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-10148: The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which a",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-10148",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-1564: Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-1564",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-4566: Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script o",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-4566",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-4567: Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitr",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-4567",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5833: Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5833",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-5834: Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitra",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-5834",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-6634: Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-6634",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-6897: Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijac",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-6897",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-7168: Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitra",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-7168",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-7169: Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 al",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-7169",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2016-9263: WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection (XSF) attacks by leveraging",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2016-9263",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14718: Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14718",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14720: Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14720",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14721: Before version 4.8.2, WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14721",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14724: Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14724",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14725: Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14725",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-14726: Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-14726",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-17092: wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attac",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-17092",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-17093: wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-17093",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-17094: wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-17094",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5487: wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors,",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5487",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5488: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1)",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5488",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5490: Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbi",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5490",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5491: wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5491",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5610: wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5610",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-5612: Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbi",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-5612",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-6814: In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-6814",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-6815: In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-6815",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-6816: In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-6816",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-6817: In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-6817",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-6818: In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-6818",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-6819: In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-6819",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-8295: WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a craf",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-8295",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-9061: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presen",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-9061",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2017-9063: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session.",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2017-9063",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2023-2745: WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "warning",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2023-2745",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2010-5297: WordPress before 3.0.1, when a Multisite installation is used, permanently retains the \"site administrators can add users\" option once changed, which might allow remote authenticat",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "info",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2010-5297",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2011-0700: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (1) the",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "info",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2011-0700",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2012-4422: wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activati",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "info",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2012-4422",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-4340: wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "info",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-4340",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2013-5739: The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote authenticated users to conduct cross-site",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "info",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2013-5739",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2014-5240: Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arb",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "info",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2014-5240",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "known_vulnerability_advisory",
"title": "CVE-2015-5622: Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor",
"public": true,
"version": "3.0",
"audience": "nutzer",
"category": "vulnerability",
"severity": "info",
"confirmed": true,
"technology": "WordPress",
"advisory_id": "CVE-2015-5622",
"user_importance": 135,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "data_entry_privacy_context_missing",
"title": "Dateneingabe ohne klaren Datenschutzkontext",
"public": true,
"audience": "nutzer",
"category": "data_entry",
"severity": "warning",
"user_importance": 122,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "operator_identity_unclear",
"title": "Betreiberidentität wirkt unklar",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "info",
"user_importance": 114,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "sampled_form_privacy_context_missing",
"title": "Formular-Unterseite ohne klaren Datenschutzkontext",
"public": true,
"audience": "nutzer",
"category": "crawl",
"severity": "warning",
"user_importance": 96,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "form_label_missing",
"count": 1,
"title": "Formularfelder ohne klare Beschriftung",
"public": true,
"audience": "nutzer",
"category": "accessibility",
"severity": "warning",
"user_importance": 92,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "important_pages_not_discovered",
"title": "Wichtige Betreiberseiten nicht vollständig in der Linkstruktur gefunden",
"public": true,
"audience": "nutzer",
"category": "crawl",
"severity": "warning",
"user_importance": 88,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "button_name_missing",
"count": 1,
"title": "Buttons ohne erkennbaren Namen",
"public": true,
"audience": "nutzer",
"category": "accessibility",
"severity": "warning",
"user_importance": 86,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "image_alt_missing",
"count": 1,
"title": "Bilder ohne Alternativtext",
"public": true,
"audience": "nutzer",
"category": "accessibility",
"severity": "info",
"user_importance": 82,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "missing_hsts",
"title": "HSTS fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"user_importance": 78,
"importance_label": "Technischer Hinweis"
},
{
"id": "too_many_render_blocking_assets",
"title": "Viele potenziell blockierende Assets",
"public": true,
"audience": "betreiber",
"category": "performance",
"severity": "info",
"user_importance": 74,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_csp",
"title": "Content-Security-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"user_importance": 72,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_x_frame_options",
"title": "X-Frame-Options fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"user_importance": 70,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_x_content_type_options",
"title": "X-Content-Type-Options fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"user_importance": 70,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_embedder_policy",
"title": "Cross-Origin-Embedder-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 68,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_opener_policy",
"title": "Cross-Origin-Opener-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 66,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_resource_policy",
"title": "Cross-Origin-Resource-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 64,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_referrer_policy",
"title": "Referrer-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 40,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_permissions_policy",
"title": "Permissions-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 40,
"importance_label": "Technischer Hinweis"
}
],
"audit_modules": [
{
"id": "security_tls",
"color": "red",
"score": 34,
"title": "Sicherheit, TLS & Header",
"source": "DNS, TLS, HTTP-Status, Zertifikat und Security-Header",
"status": "kritisch",
"evidence": "1 Infrastruktur-Hinweis(e), Security-Header: 0/9 vorhanden, 9 fehlen, externe Skript-Hosts: 0."
},
{
"id": "privacy_consent",
"color": "red",
"score": 48,
"title": "Datenschutz, Cookies & Consent",
"source": "Browser, HTTP-Header, HTML und Consent-/Cookie-Heuristik",
"status": "kritisch",
"evidence": "0 Tracking-Script(s), 0 Cookie(s) vor Einwilligung, 0 Tracking-Cookie(s), Ablehnen-Option: nein, Consent-Audit: 48."
},
{
"id": "site_coverage",
"color": "orange",
"score": 66,
"title": "Seitenabdeckung & Crawl",
"source": "Startseiten-Links, Compliance-Links und begrenzter interner Zusatzabruf",
"status": "auffällig",
"evidence": "30 interne Linkziele erkannt, 4 priorisierte Unterseite(n) abgerufen."
},
{
"id": "forms_payments",
"color": "yellow",
"score": 75,
"title": "Formulare, Login & Zahlung",
"source": "HTML-Formulare, Eingabefelder, Zahlungsanbieter und Kontextlinks",
"status": "prüfen",
"evidence": "Aus diesem Rohfeld wird im Testresult keine zusätzliche Scan-Feststellung abgeleitet; Betreiberkontext und Umsetzungshinweise sind ausgelagert."
},
{
"id": "accessibility_usability",
"color": "yellow",
"score": 76,
"title": "Barrierefreiheit & Usability",
"source": "Passives HTML-Sample: Bilder, Formulare, Buttons, Sprache, Headings und Viewport",
"status": "prüfen",
"evidence": "1 Bild(er) ohne alt, 1 Formularfeld(er) ohne Beschriftung, 1 Button(s) ohne Namen."
},
{
"id": "operator_transparency",
"color": "yellow",
"score": 85,
"title": "Impressum, Kontakt & Datenschutzerklärung",
"source": "Deutschsprachige Betreiber- und Datenschutzhinweis-Erkennung",
"status": "prüfen",
"evidence": "Impressum: ja, Datenschutz: nein, Kontakt: nein."
},
{
"id": "performance_mobile",
"color": "green",
"score": 94,
"title": "Performance & mobile Nutzbarkeit",
"source": "HTTP-Antwort, HTML-Größe, Komprimierung und mobile Basis",
"status": "unauffällig",
"evidence": "Performance-Score 94, Antwortzeit 377 ms."
},
{
"id": "browser_evidence",
"color": "green",
"score": 100,
"title": "Browser-Nachweis",
"source": "Headless Chromium mit Screenshot- und Request-Telemetrie",
"status": "unauffällig",
"evidence": "45 Request(s), 0 Drittanbieter-Domain(s), davon 0 datenschutzrelevant, 0 Browser-Cookie(s), Transfer-Prüfbedarf: 0, Referrer-/URL-Leaks: 0, Fingerprinting-/Replay-Hinweise: 0."
},
{
"id": "consent_journey",
"color": "green",
"score": 100,
"title": "Consent-Journey-Matrix",
"source": "Chromium-Zustände: Erstaufruf, Reject, Accept und GPC",
"status": "unauffällig",
"evidence": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 0 im GPC-Aufruf."
},
{
"id": "cookie_inventory",
"color": "green",
"score": 100,
"title": "Cookie-Inventar",
"source": "HTTP-Set-Cookie und Chromium-Cookies beim ersten Seitenaufruf",
"status": "unauffällig",
"evidence": "0 Cookie(s), 0 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 0 langlebig, 0 sehr lang."
},
{
"id": "embedded_content",
"color": "green",
"score": 100,
"title": "Externe Inhalte & Widgets",
"source": "HTML-Embeds und Chromium-Drittanbieter-Requests",
"status": "unauffällig",
"evidence": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen."
},
{
"id": "script_supply_chain",
"color": "green",
"score": 100,
"title": "Externe Skripte & SRI",
"source": "HTML-Script-Tags, Anbieterklassifikation und SRI-Attribute",
"status": "unauffällig",
"evidence": "0 externe Skript(e) von 0 Host(s), 0 ohne SRI, 0 Tracking-/Tag-nahe Skript(e)."
},
{
"id": "google_third_parties",
"color": "green",
"score": 100,
"title": "Google-Dienste & Drittanbieter",
"source": "Chromium-Requests, Anbieterklassifikation und Google Consent Mode Heuristik",
"status": "unauffällig",
"evidence": "Keine Google-Domain, keine Google-Tracking-ID und keine datenschutzrelevanten Drittanbieter im passiven Check erkannt."
},
{
"id": "pii_exposure",
"color": "green",
"score": 100,
"title": "PII, URL-Parameter & Datenleck-Schutz",
"source": "URL-Parameter, interne Links, HTML-Formulare, Browser-Drittanbieter und Dateneingabe-Kontext",
"status": "unauffällig",
"evidence": "0 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext."
},
{
"id": "referrer_url_leaks",
"color": "green",
"score": 100,
"title": "Referrer & URL-Leaks",
"source": "Chromium-Request-Telemetrie ohne gespeicherte Parameterwerte",
"status": "unauffällig",
"evidence": "0 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 0 sensible Query-Kontexte."
},
{
"id": "seo_integrity",
"color": "green",
"score": 100,
"title": "SEO-Integrität & Cloaking",
"source": "HTML-Inhalt, strukturierte Daten, Links und Googlebot-Vergleich",
"status": "unauffällig",
"evidence": "0 SEO-Spam-Hinweis(e), 0 Cloaking-Hinweis(e)."
},
{
"id": "tracking_pixels_beacons",
"color": "green",
"score": 100,
"title": "Tracking-Pixel & Beacons",
"source": "HTML-Pixel, Link-Ping-Attribute, Chromium-Requests und Browser-API-Instrumentierung",
"status": "unauffällig",
"evidence": "0 Pixel-/Bildtracking-Hinweis(e), 0 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s)."
}
],
"ai_search_policy_evidence": {
"files": [
{
"id": "robots_txt",
"url": "https://www.deutsche-wordpress-themes.com/robots.txt",
"label": "robots.txt",
"reason": "",
"status": "found",
"body_size": 58,
"truncated": false,
"body_sha256": "93d80b7b0b44be46e75224fd75114a11ab14b38cbd6ea1494304bde139501da9",
"duration_ms": 68,
"http_status": 200,
"ai_bot_policy": {
"bot_directives": [],
"explicit_ai_bots": [],
"explicit_ai_bot_count": 0,
"wildcard_directive_count": 0,
"wildcard_directives_sample": []
},
"relevant_lines": [
"Sitemap: https://deutsche-wordpress-themes.com/sitemap.xml"
]
},
{
"id": "llms_txt",
"url": "https://www.deutsche-wordpress-themes.com/llms.txt",
"label": "llms.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 387,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
},
{
"id": "ai_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/ai.txt",
"label": "AI Policy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 402,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
},
{
"id": "ai_policy_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/ai-policy.txt",
"label": "AI Policy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 382,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
},
{
"id": "ward_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/ward.txt",
"label": "WARD Policy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 394,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
]
}
],
"origin": "https://www.deutsche-wordpress-themes.com",
"schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 5,
"found_file_count": 5,
"policy_file_count": 4,
"explicit_ai_bot_count": 0
},
"summary": "5 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
"available": true,
"guardrails": [
"Nur feste Same-Origin-Policy-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"known_ai_bots": [
"GPTBot",
"ChatGPT-User",
"Google-Extended",
"ClaudeBot",
"PerplexityBot",
"CCBot"
],
"explicit_ai_bots": [],
"policy_file_count": 4,
"llms_ward_policy_status": "policy_file_found",
"robots_ai_policy_status": "robots_found_no_ai_bot_policy"
},
"adtech_transparency_evidence": {
"files": [
{
"id": "ads_txt",
"url": "https://www.deutsche-wordpress-themes.com/ads.txt",
"label": "ads.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 395,
"http_status": 200,
"ads_txt_policy": {
"entry_count": 0,
"rows_sample": [],
"direct_count": 0,
"variable_keys": [
"<html lang",
"<script type",
"if(window.location.search.includes('redirect",
"let end",
"let loc",
"let parts",
"let rep",
"let search"
],
"reseller_count": 0,
"variable_count": 12,
"invalid_line_count": 16,
"exchange_domain_count": 0,
"exchange_domains_sample": []
},
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"sellers_json_policy": []
},
{
"id": "app_ads_txt",
"url": "https://www.deutsche-wordpress-themes.com/app-ads.txt",
"label": "app-ads.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 414,
"http_status": 200,
"ads_txt_policy": {
"entry_count": 0,
"rows_sample": [],
"direct_count": 0,
"variable_keys": [
"<html lang",
"<script type",
"if(window.location.search.includes('redirect",
"let end",
"let loc",
"let parts",
"let rep",
"let search"
],
"reseller_count": 0,
"variable_count": 12,
"invalid_line_count": 16,
"exchange_domain_count": 0,
"exchange_domains_sample": []
},
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"sellers_json_policy": []
},
{
"id": "sellers_json",
"url": "https://www.deutsche-wordpress-themes.com/sellers.json",
"label": "sellers.json",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 385,
"http_status": 200,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": {
"parse_ok": false,
"domain_count": 0,
"seller_count": 0,
"passthrough_count": 0,
"confidential_count": 0,
"seller_type_counts": []
}
}
],
"origin": "https://www.deutsche-wordpress-themes.com",
"schema": "https://saferpage.de/schemas/adtech-transparency-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 3,
"direct_count": 0,
"reseller_count": 0,
"found_file_count": 3,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"summary": "3 von 3 AdTech-Transparenzdatei(en) gefunden; 0 DIRECT- und 0 RESELLER-Zeile(n).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-AdTech-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status, Zähler und kurze relevante Zeilen"
],
"direct_count": 0,
"ads_txt_found": true,
"reseller_count": 0,
"app_ads_txt_found": true,
"sellers_json_found": true,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"sellers_json_parse_ok": false,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"security_trust_policy_evidence": {
"files": [
{
"id": "security_txt",
"url": "https://www.deutsche-wordpress-themes.com/.well-known/security.txt",
"label": "security.txt",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 389,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"security_txt_policy": {
"field_count": 0,
"contact_count": 0,
"expires_values": [],
"fields_present": [],
"policy_present": false,
"contact_samples": [],
"expires_present": false,
"canonical_present": false,
"encryption_present": false,
"preferred_languages": []
}
},
{
"id": "security_txt_legacy",
"url": "https://www.deutsche-wordpress-themes.com/security.txt",
"label": "security.txt legacy",
"reason": "",
"status": "found",
"body_size": 1090,
"truncated": false,
"body_sha256": "3920a33591b9873bf4b4fa4f3a2c65b8123b42c7e882f80779f80d5af064b303",
"duration_ms": 671,
"http_status": 200,
"relevant_lines": [
"<html lang=\"en-US\" style=\"height:100%\">",
"<head>",
"<script type=\"text/javascript\">",
"let rep = \"\"",
"let loc = window.location.hostname",
"let parts = loc.split('.')",
"let end = parts[parts.length -1]",
"loc = window.location.protocol + '//' + parts[parts.length -2] + '.' + end",
"let search = ''",
"if(window.location.search){",
"search = window.location.search",
"} else {",
"search = '?'",
"}",
"if(window.location.search.includes('redirect=true')){",
"window.location.replace(loc)"
],
"security_txt_policy": {
"field_count": 0,
"contact_count": 0,
"expires_values": [],
"fields_present": [],
"policy_present": false,
"contact_samples": [],
"expires_present": false,
"canonical_present": false,
"encryption_present": false,
"preferred_languages": []
}
}
],
"origin": "https://www.deutsche-wordpress-themes.com",
"schema": "https://saferpage.de/schemas/security-trust-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 2,
"field_count": 0,
"contact_count": 0,
"found_file_count": 2,
"preferred_well_known_found": 1
},
"summary": "2 von 2 security.txt-Ziel(en) gefunden; 0 Kontaktfeld(er), 0 strukturierte Feld(er).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-security.txt-Ziele",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"field_count": 0,
"contact_count": 0,
"fields_present": [],
"policy_present": false,
"expires_present": false,
"encryption_present": false,
"security_txt_found": true,
"preferred_well_known_found": true
},
"site_coverage_analysis": {
"color": "orange",
"pages": [
{
"url": "https://www.deutsche-wordpress-themes.com/impressum.html",
"path": "/impressum.html",
"text": "Impressum",
"source": "homepage_link",
"category": "impressum",
"priority": 96
},
{
"url": "https://deutsche-wordpress-themes.com/terms.html",
"path": "/terms.html",
"text": "",
"source": "sitemap",
"category": "agb",
"priority": 84
},
{
"url": "https://www.deutsche-wordpress-themes.com/terms.html",
"path": "/terms.html",
"text": "Terms",
"source": "homepage_link",
"category": "agb",
"priority": 80
},
{
"url": "https://deutsche-wordpress-themes.com/",
"path": "/",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/144-ocean-mist-1-2-deutsch.html",
"path": "/144-ocean-mist-1-2-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/193-typo-1-1-deutsch.html",
"path": "/193-typo-1-1-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/866-cecilia-blue-v1-0-deutsch.html",
"path": "/866-cecilia-blue-v1-0-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/869-cecilia-brown-v1-0-deutsch.html",
"path": "/869-cecilia-brown-v1-0-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/872-cecilia-green-v1-0-deutsch.html",
"path": "/872-cecilia-green-v1-0-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/881-cecilia-pink-v1-0-deutsch.html",
"path": "/881-cecilia-pink-v1-0-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/884-cecilia-red-v1-0-deutsch.html",
"path": "/884-cecilia-red-v1-0-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://deutsche-wordpress-themes.com/887-cecilia-sand-v1-0-deutsch.html",
"path": "/887-cecilia-sand-v1-0-deutsch.html",
"text": "",
"source": "sitemap",
"category": "unterseite",
"priority": 24
}
],
"score": 66,
"status": "auffällig",
"summary": "30 interne Linkziele erkannt (120 aus Sitemap), 4 priorisierte Unterseite(n) zusätzlich abgerufen.",
"findings": [
{
"id": "important_pages_not_discovered",
"title": "Wichtige Betreiberseiten nicht vollständig in der Linkstruktur gefunden",
"public": true,
"category": "crawl",
"severity": "warning"
},
{
"id": "sampled_form_privacy_context_missing",
"title": "Formular-Unterseite ohne klaren Datenschutzkontext",
"public": true,
"category": "crawl",
"severity": "warning"
}
],
"robots_ok": true,
"categories": {
"agb": 2,
"impressum": 1,
"unterseite": 27
},
"sample_limit": 4,
"sampled_count": 4,
"sampled_pages": [
{
"ok": true,
"url": "https://www.deutsche-wordpress-themes.com/impressum.html",
"path": "/impressum.html",
"audit": {
"form_count": 1,
"finding_ids": [
"operator_identity_unclear"
],
"cookie_count": 0,
"imprint_found": true,
"consent_hint_found": false,
"reject_option_found": false,
"privacy_policy_found": false,
"tracking_script_count": 0,
"pre_consent_cookie_count": 0,
"pre_consent_tracking_cookie_count": 0
},
"forms": 1,
"title": "Imprint | The best German Wordpress Themes",
"status": 200,
"category": "impressum",
"duration_ms": 28,
"privacy_hint": false,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://deutsche-wordpress-themes.com/terms.html",
"path": "/terms.html",
"audit": {
"form_count": 0,
"finding_ids": [
"operator_identity_unclear",
"consent_no_reject_option",
"consent_accept_only"
],
"cookie_count": 0,
"imprint_found": true,
"consent_hint_found": true,
"reject_option_found": false,
"privacy_policy_found": true,
"tracking_script_count": 0,
"pre_consent_cookie_count": 0,
"pre_consent_tracking_cookie_count": 0
},
"forms": 0,
"title": "Terms | Wordpress Themes",
"status": 200,
"category": "agb",
"duration_ms": 571,
"privacy_hint": true,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://www.deutsche-wordpress-themes.com/terms.html",
"path": "/terms.html",
"audit": {
"form_count": 0,
"finding_ids": [
"operator_identity_unclear",
"consent_no_reject_option",
"consent_accept_only"
],
"cookie_count": 0,
"imprint_found": true,
"consent_hint_found": true,
"reject_option_found": false,
"privacy_policy_found": true,
"tracking_script_count": 0,
"pre_consent_cookie_count": 0,
"pre_consent_tracking_cookie_count": 0
},
"forms": 0,
"title": "Terms | Wordpress Themes",
"status": 200,
"category": "agb",
"duration_ms": 360,
"privacy_hint": true,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://deutsche-wordpress-themes.com/",
"path": "/",
"audit": {
"form_count": 1,
"finding_ids": [
"operator_identity_unclear"
],
"cookie_count": 0,
"imprint_found": true,
"consent_hint_found": false,
"reject_option_found": false,
"privacy_policy_found": false,
"tracking_script_count": 0,
"pre_consent_cookie_count": 0,
"pre_consent_tracking_cookie_count": 0
},
"forms": 1,
"title": "300 Wordpress Themes in Deutsch, Templates, Premium Vorlagen und Designs zum gratis downloaden",
"status": 200,
"category": "unterseite",
"duration_ms": 56,
"privacy_hint": false,
"privacy_policy_audit": []
}
],
"robots_checked": true,
"sitemap_sources": [
"https://deutsche-wordpress-themes.com/sitemap.xml"
],
"sitemap_available": true,
"sitemap_url_count": 120,
"homepage_link_count": 44,
"internal_link_count": 30,
"privacy_policy_audit": [],
"sitemap_source_count": 1,
"provider_disclosure_audit": {
"found": [],
"checks": [],
"reason": "no_detected_services",
"missing": [],
"available": false
},
"important_categories_found": [
"impressum"
],
"sampled_tracking_page_count": 0,
"sampled_form_privacy_gap_count": 2,
"sitemap_candidate_source_count": 2
},
"page_analysis": {
"h1": [
"<a href=\"/index.html\">Die Besten Deutschen Wordpress Themes</a>"
],
"h2": [
"<span class=\"orange\"> 302</span> Kostenlose Wordpress Themes in Deutsch als Sofort Download",
"Themen suchen",
"<span class=\"colour\">Die Besten Wordpress Themes</span>",
"<span class=\"colour\">News</span>",
"Kategorien"
],
"title": "300 Wordpress Themes in Deutsch, Templates, Premium Vorlagen und Designs zum gratis downloaden",
"keywords": [
[
"deutsch",
74
],
[
"theme",
41
],
[
"eingetragen",
30
],
[
"spaltiges",
29
],
[
"wordpress",
26
],
[
"themes",
21
],
[
"farben",
16
],
[
"weiss",
14
],
[
"schwarz",
13
],
[
"sidebar",
12
]
],
"language": "de-de",
"description": "Die besten und beliebtesten kostenlosen deutschen Wordpress Themes, Templates, Premium Vorlagen und Designs zum gratis downloaden.",
"favicon_url": "https://www.deutsche-wordpress-themes.com/favicon.ico",
"link_counts": {
"external": 0,
"internal": 44
},
"preview_image": "/cache/screenshots/deutsche-wordpress-themes.com-160x150-d1b093e74cee7c3f34.png",
"screenshot_url": "/cache/screenshots/deutsche-wordpress-themes.com-160x150-d1b093e74cee7c3f34.png",
"external_scripts": [],
"browser_final_url": "https://www.deutsche-wordpress-themes.com/",
"meta_preview_image": "",
"screenshot_renderer": "playwright-chromium",
"external_link_targets": []
},
"browser_analysis": {
"cookies": {
"items": [],
"total": 0,
"third_party": 0
},
"storage": {
"total": 0,
"local_storage_keys": [],
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_keys": [],
"session_storage_total": 0
},
"findings": [],
"renderer": "playwright-chromium",
"final_url": "https://www.deutsche-wordpress-themes.com/",
"consent_ui": {
"accept_controls": [],
"accept_max_area": 0,
"reject_controls": [],
"reject_max_area": 0,
"settings_controls": [],
"first_layer_summary": "Akzeptieren 0 / Ablehnen 0 / Einstellungen 0",
"cookie_context_found": false,
"reject_less_prominent": false,
"visible_control_count": 12,
"reject_prominence_ratio": 0
},
"gpc_signal": {
"error": "",
"enabled": true,
"storage": {
"total": 0,
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 0
},
"cookie_count": 0,
"request_count": 45,
"sec_gpc_header": true,
"navigator_value": true,
"contacted_domains": [
{
"host": "deutsche-wordpress-themes.com",
"count": 45,
"category": "other",
"provider": "deutsche-wordpress-themes.com",
"third_party": false,
"category_label": "Sonstige",
"resource_types": {
"image": 33,
"script": 8,
"document": 1,
"stylesheet": 3
}
}
],
"contacted_domain_count": 1,
"privacy_relevant_domains": [],
"third_party_cookie_count": 0,
"third_party_domain_count": 0,
"privacy_relevant_domain_count": 0
},
"screenshot": {
"fit": "contain",
"width": 160,
"height": 150,
"source_width": 1024,
"source_height": 960,
"source_capture": "full_page",
"capture_version": "contain-v4-viewport-transparency-160x150"
},
"consent_apis": {
"cmpapi": false,
"tcfapi": false,
"onetrust": false,
"cookiebot": false,
"data_layer": false,
"cmp_detected": false,
"usercentrics": false,
"google_tag_data": false
},
"accept_signal": {
"error": "",
"enabled": false,
"storage": {
"total": 0,
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 0
},
"clicked_text": "",
"accept_clicked": false,
"accept_available": false,
"contacted_domains": [],
"contacted_domain_count": 0,
"new_domains_after_accept": [],
"privacy_relevant_domains": [],
"third_party_domain_count": 0,
"cookie_count_after_accept": 0,
"cookie_count_before_accept": 0,
"request_count_after_accept": 0,
"storage_count_after_accept": 0,
"request_count_before_accept": 0,
"new_cookie_count_after_accept": 0,
"privacy_relevant_domain_count": 0,
"new_request_count_after_accept": 0,
"third_party_cookie_count_after_accept": 0,
"storage_tracking_hint_count_after_accept": 0,
"new_privacy_relevant_domains_after_accept": [],
"new_privacy_relevant_domain_count_after_accept": 0
},
"request_count": 45,
"top_providers": [],
"request_samples": [],
"cmp_consent_state": {
"tcf": {
"api_found": false,
"vendor_li": [],
"cmp_loaded": false,
"cmp_status": "",
"purpose_li": [],
"event_status": "",
"gdpr_applies": null,
"ping_success": false,
"policy_version": "",
"vendor_consents": [],
"vendor_li_count": 0,
"purpose_consents": [],
"purpose_li_count": 0,
"tc_string_length": 0,
"tc_string_present": false,
"vendor_consent_count": 0,
"purpose_consent_count": 0
},
"onetrust": {
"found": false,
"active_groups": [],
"active_group_count": 0
},
"cookiebot": {
"found": false,
"declined": false,
"consented": false,
"has_response": false,
"consent_marketing": null,
"consent_statistics": null,
"consent_preferences": null
},
"usercentrics": {
"found": false,
"has_response": false,
"services_count": 0,
"accepted_services_count": 0
}
},
"contacted_domains": [
{
"host": "deutsche-wordpress-themes.com",
"count": 45,
"category": "other",
"provider": "deutsche-wordpress-themes.com",
"third_party": false,
"category_label": "Sonstige",
"resource_types": {
"image": 33,
"script": 8,
"document": 1,
"stylesheet": 3
}
}
],
"privacy_api_metrics": {
"api_calls": [],
"beacon_count": 0,
"webgl_read_count": 0,
"canvas_read_count": 0,
"audio_context_count": 0,
"canvas_export_count": 0,
"fetch_keepalive_count": 0,
"webgl_parameter_count": 0,
"mutation_observer_count": 0,
"keyboard_input_listener_count": 0
},
"tcf_consent_analysis": {
"color": "green",
"score": 100,
"status": "unauffällig",
"summary": "TCF-Decoder: 0 Zweck(e) mit Consent/LI-Signal, 0 Vendor-Consent(s), 0 Vendor-LI-Signal(e).",
"findings": [],
"api_found": false,
"available": false,
"cmp_loaded": false,
"cmp_status": "",
"event_status": "",
"gdpr_applies": null,
"ping_success": false,
"purpose_rows": [
{
"id": 1,
"label": "Informationen auf einem Gerät speichern und/oder abrufen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 2,
"label": "Einfache Anzeigen auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 3,
"label": "Personalisiertes Anzeigen-Profil erstellen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 4,
"label": "Personalisierte Anzeigen auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 5,
"label": "Personalisiertes Inhalts-Profil erstellen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 6,
"label": "Personalisierte Inhalte auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 7,
"label": "Anzeigen-Leistung messen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 8,
"label": "Inhalte-Leistung messen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 9,
"label": "Marktforschung zur Generierung von Erkenntnissen nutzen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 10,
"label": "Produkte entwickeln und verbessern",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 11,
"label": "Begrenzte Daten zur Anzeigen-Auswahl verwenden",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
}
],
"vendor_li_ids": [],
"policy_version": "",
"vendor_li_count": 0,
"purpose_li_count": 0,
"tc_string_length": 0,
"tc_string_present": false,
"vendor_consent_ids": [],
"granted_purpose_rows": [],
"vendor_consent_count": 0,
"purpose_consent_count": 0,
"high_risk_purpose_count": 0,
"medium_risk_purpose_count": 0
},
"viewport_transparency": {
"samples": [
{
"tag": "a",
"top": 128,
"href": "/impressum.html",
"left": 227,
"text": "Impressum",
"width": 75,
"height": 16,
"category": "imprint"
}
],
"available": true,
"sample_count": 1,
"claim_boundary": "Sichtbarkeits-Evidence aus dem ersten Headless-Chromium-Viewport; keine Aussage ueber Footer nach Scrollen, Loginbereiche oder rechtliche Vollstaendigkeit.",
"viewport_width": 1024,
"category_counts": {
"imprint": 1
},
"contact_visible": false,
"imprint_visible": true,
"viewport_height": 960,
"cookie_consent_visible": false,
"privacy_notice_visible": false
},
"consent_journey_matrix": {
"color": "green",
"items": [],
"score": 100,
"states": [
{
"id": "default",
"label": "Erstaufruf",
"description": "Kontakte ohne Nutzeraktion",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "reject_new",
"label": "Nach Ablehnen neu",
"description": "Neue Kontakte nach Ablehnen-Klick",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "accept_new",
"label": "Nach Akzeptieren neu",
"description": "Neue Kontakte nach Akzeptieren-Klick",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "gpc",
"label": "GPC-Aufruf",
"description": "Kontakte bei Global Privacy Control",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
}
],
"status": "unauffällig",
"summary": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 0 im GPC-Aufruf.",
"gpc_privacy_relevant_domain_count": 0,
"accept_privacy_relevant_domain_count": 0,
"reject_privacy_relevant_domain_count": 0
},
"consent_state_evidence": {
"rows": [
{
"id": "default",
"label": "Erstaufruf",
"status": "ohne Nutzeraktion",
"evidence": "Baseline aus erstem Chromium-Aufruf ohne Banner-Interaktion.",
"risk_level": "niedrig",
"cookie_count": 0,
"domain_count": 1,
"request_count": 45,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "reject",
"label": "Nach Ablehnen",
"status": "nicht verfügbar",
"evidence": "",
"risk_level": "niedrig",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "accept",
"label": "Nach Akzeptieren",
"status": "nicht ausgeführt",
"evidence": "",
"risk_level": "niedrig",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "gpc",
"label": "GPC-Aufruf",
"status": "aktiv",
"evidence": "Navigator-GPC und Sec-GPC wurden im gesonderten Browserlauf gesetzt.",
"risk_level": "niedrig",
"cookie_count": 0,
"domain_count": 1,
"request_count": 45,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
}
],
"color": "green",
"score": 100,
"status": "unauffällig",
"summary": "Consent-State-Evidence: 4 Zustände verglichen, 0 hoch auffällig, 0 mittel auffällig.",
"findings": [],
"available": true,
"high_count": 0,
"medium_count": 0
},
"contacted_domain_count": 1,
"fingerprinting_analysis": {
"color": "green",
"score": 100,
"checks": [
{
"id": "canvas",
"ok": true,
"count": 0,
"label": "Canvas-Auslese",
"detail": "0 Pixel-Lesezugriff(e), 0 Export(e)."
},
{
"id": "webgl",
"ok": true,
"count": 0,
"label": "WebGL-Merkmale",
"detail": "0 Parameterzugriff(e), 0 Pixel-Lesezugriff(e)."
},
{
"id": "audio",
"ok": true,
"count": 0,
"label": "AudioContext",
"detail": "0 AudioContext/OfflineAudioContext-Aufruf(e)."
},
{
"id": "session_replay",
"ok": true,
"count": 0,
"label": "Session-Replay-Anbieter",
"detail": "Keine bekannten Anbieter erkannt."
},
{
"id": "input_listeners",
"ok": true,
"count": 0,
"label": "Tastatur-/Eingabe-Listener",
"detail": "0 Tastatur-/Input-Listener, 5 Interaktions-Listener, 0 MutationObserver."
}
],
"status": "unauffällig",
"metrics": {
"webgl_read_count": 0,
"canvas_read_count": 0,
"audio_context_count": 0,
"canvas_export_count": 0,
"webgl_parameter_count": 0,
"mutation_observer_count": 0,
"keyboard_input_listener_count": 0
},
"summary": "0 Fingerprinting-/Session-Replay-Hinweis(e) aus dem Browserlauf.",
"findings": [],
"finding_count": 0,
"session_replay_domains": []
},
"privacy_relevant_domains": [],
"provider_category_counts": [],
"provider_category_labels": [],
"third_party_domain_count": 0,
"embedded_content_analysis": {
"color": "green",
"items": [],
"score": 100,
"status": "unauffällig",
"summary": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen.",
"findings": [],
"map_count": 0,
"total_count": 0,
"video_count": 0,
"captcha_count": 0,
"category_counts": [],
"social_widget_count": 0,
"loaded_pre_consent_count": 0,
"request_count_by_provider": []
},
"referrer_leakage_analysis": {
"color": "green",
"items": [],
"score": 100,
"status": "unauffällig",
"summary": "0 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 0 sensible Query-Kontexte.",
"findings": [],
"sample_count": 0,
"full_referrer_count": 0,
"page_url_param_count": 0,
"affected_domain_count": 0,
"sensitive_query_count": 0
},
"third_party_contact_matrix": {
"color": "green",
"items": [],
"score": 100,
"status": "unauffällig",
"summary": "0 Drittanbieter-Domain(s) beim ersten Browseraufruf, davon 0 datenschutzrelevant.",
"category_counts": [],
"total_domain_count": 0,
"total_request_count": 0,
"privacy_relevant_count": 0,
"transfer_risk_analysis": {
"color": "green",
"items": [],
"score": 100,
"status": "unauffällig",
"summary": "0 Drittanbieter für Transfer-/Jurisdiktionsprüfung, 0 mit hohem Prüfbedarf, 0 unklar.",
"findings": [],
"unknown_count": 0,
"high_risk_count": 0,
"total_vendor_count": 0,
"third_country_count": 0
}
},
"privacy_relevant_domain_count": 0,
"tracking_pixel_beacon_analysis": {
"color": "green",
"items": [],
"score": 100,
"status": "unauffällig",
"summary": "0 Pixel-/Bildtracking-Hinweis(e), 0 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s).",
"findings": [],
"pixel_count": 0,
"link_ping_count": 0,
"telemetry_count": 0,
"beacon_api_count": 0,
"third_party_count": 0,
"fetch_keepalive_count": 0,
"privacy_relevant_count": 0,
"beacon_code_reference_count": 0,
"fetch_keepalive_reference_count": 0
}
},
"privacy_analysis": {
"cookies": {
"items": [],
"total": 0,
"tracking": [],
"pre_consent": [],
"missing_secure": [],
"missing_samesite": [],
"pre_consent_tracking": [],
"pre_consent_nonessential": []
},
"findings": [],
"tracking_ids": [],
"tracking_scripts": [],
"consent_hint_found": false,
"privacy_policy_hint_found": false
},
"consent_audit": {
"color": "red",
"score": 48,
"checks": [
{
"id": "banner_visible",
"ok": false,
"label": "Cookie-/Consent-Hinweis sichtbar",
"detail": "Ein Hinweis mit Cookie-/Einwilligungsbezug wurde im sichtbaren Text erkannt."
},
{
"id": "reject_visible",
"ok": false,
"label": "Ablehnen gleichwertig erreichbar",
"detail": "Ablehnen oder nur notwendige Cookies wurde im Text oder Browser erkannt. Browser-Buttons: 0."
},
{
"id": "settings_visible",
"ok": false,
"label": "Einstellungen oder Auswahl vorhanden",
"detail": "Eine Einstellungs- oder Auswahlmoeglichkeit wurde im Text oder Browser erkannt. Browser-Buttons: 0."
},
{
"id": "browser_reject_visible",
"ok": true,
"label": "Ablehnen im sichtbaren Banner",
"detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
},
{
"id": "browser_settings_visible",
"ok": true,
"label": "Einstellungen im sichtbaren Banner",
"detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
},
{
"id": "reject_equally_prominent",
"ok": true,
"label": "Ablehnen nicht deutlich schwaecher dargestellt",
"detail": "Groessen-Verhältnis Ablehnen/Akzeptieren: nicht messbar."
},
{
"id": "reject_button_clickable",
"ok": true,
"label": "Ablehnen technisch klickbar",
"detail": "Wenn ein Ablehnen-Button sichtbar ist, klickt SaferPage ihn im Chromium-Browser einmal an."
},
{
"id": "no_new_cookies_after_reject",
"ok": true,
"label": "Keine neuen Cookies nach Ablehnen",
"detail": "0 neue Cookie(s) nach dem Ablehnen-Klick."
},
{
"id": "no_tracking_storage_after_reject",
"ok": true,
"label": "Kein Tracking-Storage nach Ablehnen",
"detail": "0 Tracking-Hinweis(e) im Web Storage nach Ablehnen."
},
{
"id": "no_privacy_domains_after_reject",
"ok": true,
"label": "Keine neuen Tracking-Kontakte nach Ablehnen",
"detail": "0 neue datenschutzrelevante Domain(s) nach Ablehnen."
},
{
"id": "gpc_signal_respected",
"ok": true,
"label": "GPC-Signal ohne Tracking-Hinweise",
"detail": "GPC-Aufruf: 0 datenschutzrelevante Domain(s), 0 Drittanbieter-Cookie(s), 0 Storage-Hinweis(e)."
},
{
"id": "no_tracking_cookies_before_consent",
"ok": true,
"label": "Keine Tracking-Cookies vor Einwilligung",
"detail": "0 Tracking-Cookie(s) im Erstaufruf."
},
{
"id": "no_nonessential_cookies_before_consent",
"ok": true,
"label": "Keine nicht notwendigen Cookies vor Einwilligung",
"detail": "0 moeglicherweise nicht notwendige Cookie(s) im Erstaufruf."
},
{
"id": "third_parties_explained",
"ok": true,
"label": "Drittanbieter begrenzt und erklaerbar",
"detail": "0 datenschutzrelevante Drittanbieter-Domain(s), 0 Drittanbieter insgesamt."
},
{
"id": "storage_without_tracking_hints",
"ok": true,
"label": "Web Storage ohne Tracking-Hinweise",
"detail": "0 Storage-Key(s), 0 Tracking-Hinweis(e)."
},
{
"id": "cmp_api_detected_when_needed",
"ok": true,
"label": "CMP-/TCF-Signal bei Tracking erkennbar",
"detail": "Gängige CMP-/TCF-Indikatoren: __tcfapi, __cmp, Cookiebot, OneTrust oder Usercentrics."
},
{
"id": "accept_click_documented",
"ok": true,
"label": "Akzeptieren-Klick nachvollziehbar",
"detail": "Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0."
},
{
"id": "cmp_state_readable",
"ok": true,
"label": "CMP-/TCF-Zustand auslesbar",
"detail": "TCF TC-String: nein, Cookiebot: nein, OneTrust: nein, Usercentrics: nein."
},
{
"id": "cmp_default_restrictive",
"ok": true,
"label": "CMP-Default wirkt restriktiv",
"detail": "TCF Purposes erlaubt: 0, TCF Vendors erlaubt: 0, Cookiebot Statistik/Marketing: nein."
}
],
"status": "kritisch",
"summary": "Consent, Tracking oder Drittanbieter wirken im Erstaufruf deutlich nachbesserungsbeduerftig.",
"evidence": [
"0 Cookie(s) beim ersten Aufruf aus HTTP-Headern und Chromium",
"0 Tracking-Script(s) im HTML",
"0 datenschutzrelevante Drittanbieter-Domain(s)",
"0 Storage-Key(s), 0 Tracking-Hinweis(e)",
"Consent-Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0",
"Ablehnen/Akzeptieren-Prominenz: nicht messbar",
"Reject-Test: nicht ausgefuehrt, neue Cookies 0, Tracking-Storage 0, neue Datenschutz-Domains 0",
"Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0, Drittanbieter-Cookies 0",
"CMP-State: TCF-String nein, TCF Purposes 0, TCF Vendors 0, Cookiebot nein, OneTrust-Gruppen 0, Usercentrics-Services 0",
"GPC-Test: aktiv, Datenschutz-Domains 0, Drittanbieter-Cookies 0, Storage-Hinweise 0",
"CMP-/TCF-Signal: nein",
"Google Consent Default: nein"
],
"gpc_enabled": true,
"cmp_detected": false,
"blocking_plan": {
"items": [],
"summary": "Kein Google-Tag und keine Google-Domain erkannt; kein Google-spezifischer Pre-Consent-Blockierplan aus dieser Evidenz erforderlich.",
"available": false,
"high_count": 0,
"total_count": 0,
"type_counts": [],
"medium_count": 0
},
"tcf_api_found": false,
"cookiebot_found": false,
"accept_test_enabled": false,
"browser_cookie_count": 0,
"accept_button_clicked": false,
"browser_storage_count": 0,
"reject_button_clicked": false,
"reject_less_prominent": false,
"tcf_tc_string_present": false,
"tracking_script_count": 0,
"accept_button_available": false,
"reject_button_available": false,
"reject_prominence_ratio": 0,
"pre_consent_cookie_count": 0,
"pre_consent_cookie_names": [],
"tcf_vendor_consent_count": 0,
"third_party_domain_count": 0,
"tcf_purpose_consent_count": 0,
"onetrust_active_group_count": 0,
"usercentrics_services_count": 0,
"browser_accept_control_count": 0,
"browser_cookie_context_found": false,
"browser_reject_control_count": 0,
"gpc_third_party_cookie_count": 0,
"post_accept_new_cookie_count": 0,
"post_reject_new_cookie_count": 0,
"post_accept_new_request_count": 0,
"browser_settings_control_count": 0,
"gpc_storage_tracking_hint_count": 0,
"cookiebot_marketing_or_statistics": false,
"gpc_privacy_relevant_domain_count": 0,
"pre_consent_tracking_cookie_count": 0,
"pre_consent_tracking_cookie_names": [],
"privacy_relevant_third_party_count": 0,
"browser_storage_tracking_hint_count": 0,
"post_accept_third_party_cookie_count": 0,
"pre_consent_nonessential_cookie_count": 0,
"pre_consent_nonessential_cookie_names": [],
"post_accept_storage_tracking_hint_count": 0,
"post_reject_storage_tracking_hint_count": 0,
"post_accept_privacy_relevant_domain_count": 0,
"post_reject_privacy_relevant_domain_count": 0
},
"cookie_inventory": {
"color": "green",
"items": [],
"score": 100,
"total": 0,
"status": "unauffällig",
"summary": "0 Cookie(s) inventarisiert: 0 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 0 langlebige Cookie(s), 0 sehr lange Laufzeit(en).",
"findings": [],
"categories": [],
"tracking_count": 0,
"category_labels": {
"consent": "Consent",
"payment": "Zahlung",
"unknown": "Unklar",
"security": "Sicherheit",
"analytics": "Analytics",
"necessary": "Notwendig",
"functional": "Funktional",
"advertising": "Werbung"
},
"long_lived_count": 0,
"persistent_count": 0,
"first_party_count": 0,
"pre_consent_count": 0,
"retention_classes": [],
"third_party_count": 0,
"missing_secure_count": 0,
"retention_risk_count": 0,
"retention_risk_items": [],
"very_long_lived_count": 0,
"missing_samesite_count": 0,
"persistent_unknown_count": 0,
"long_lived_tracking_count": 0
},
"security_header_analysis": {
"color": "red",
"score": 34,
"checks": [
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "HSTS",
"value": "",
"header": "strict-transport-security",
"present": false,
"purpose": "Erzwingt HTTPS nach dem ersten sicheren Aufruf.",
"severity": "warning"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Content-Security-Policy",
"value": "",
"header": "content-security-policy",
"present": false,
"purpose": "Begrenzt Skript-, Frame- und Ressourcenquellen im Browser.",
"severity": "warning"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "X-Frame-Options",
"value": "",
"header": "x-frame-options",
"present": false,
"purpose": "Reduziert Clickjacking-Risiken bei älteren Browsern.",
"severity": "warning"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "X-Content-Type-Options",
"value": "",
"header": "x-content-type-options",
"present": false,
"purpose": "Verhindert MIME-Sniffing bei Skripten und Stylesheets.",
"severity": "warning"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Referrer-Policy",
"value": "",
"header": "referrer-policy",
"present": false,
"purpose": "Begrenzt, welche URL-Informationen an Zielseiten weitergegeben werden.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Permissions-Policy",
"value": "",
"header": "permissions-policy",
"present": false,
"purpose": "Begrenzt sensible Browser-Funktionen pro Seite.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Opener-Policy",
"value": "",
"header": "cross-origin-opener-policy",
"present": false,
"purpose": "Isoliert Top-Level-Fenster und reduziert Cross-Origin-Seiteneffekte.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Resource-Policy",
"value": "",
"header": "cross-origin-resource-policy",
"present": false,
"purpose": "Begrenzt, welche fremden Seiten Ressourcen einbetten dürfen.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Embedder-Policy",
"value": "",
"header": "cross-origin-embedder-policy",
"present": false,
"purpose": "Erzwingt kontrollierte Cross-Origin-Einbettungen und kann Cross-Origin Isolation ermöglichen.",
"severity": "info"
}
],
"status": "kritisch",
"missing": [
"HSTS",
"Content-Security-Policy",
"X-Frame-Options",
"X-Content-Type-Options",
"Referrer-Policy",
"Permissions-Policy",
"Cross-Origin-Opener-Policy",
"Cross-Origin-Resource-Policy",
"Cross-Origin-Embedder-Policy"
],
"summary": "0 von 9 wichtigen Security-Headern vorhanden, 0 korrekt bewertet. Keine Content-Security-Policy gefunden.",
"findings": [],
"ok_count": 0,
"weak_count": 0,
"csp_analysis": {
"color": "red",
"score": 0,
"status": "fehlt",
"summary": "Keine Content-Security-Policy gefunden.",
"enforced": false,
"findings": [],
"available": false,
"directives": [],
"report_only": false,
"finding_count": 0,
"warning_count": 0
},
"missing_count": 9,
"present_count": 0,
"missing_info_count": 5,
"missing_warning_count": 4
},
"infrastructure_analysis": {
"signals": {
"caa": false,
"dnssec": false,
"final_https": true,
"tls_version": "TLSv1.3",
"hsts_enabled": false,
"address_count": 4,
"ipv6_available": false,
"email_protection": {
"mx": false,
"spf": false,
"dmarc": false
},
"certificate_valid": true,
"certificate_issuer": "Amazon RSA 2048 M04",
"certificate_alt_names": [
"deutsche-wordpress-themes.com",
"*.deutsche-wordpress-themes.com"
],
"multiple_ip_addresses": true,
"certificate_expires_at": "Nov 12 23:59:59 2026 GMT",
"certificate_days_remaining": 151,
"certificate_hostname_matches": true
},
"findings": [
{
"id": "caa_missing",
"title": "CAA-Record fehlt",
"public": true,
"category": "dns",
"severity": "info"
}
],
"risk_level": "low",
"positive_signals": [
"Mehrere IP-Adressen gefunden: Hinweis auf redundante Infrastruktur oder CDN.",
"Moderne TLS-Version aktiv: TLSv1.3."
]
},
"performance_analysis": {
"score": 94,
"signals": {
"compressed": false,
"duration_ms": 377,
"image_count": 23,
"script_count": 9,
"cache_control": "",
"content_length": 47877,
"viewport_found": true,
"stylesheet_count": 5
},
"findings": [
{
"id": "too_many_render_blocking_assets",
"title": "Viele potenziell blockierende Assets",
"public": true,
"category": "performance",
"severity": "info"
}
],
"risk_level": "medium"
},
"accessibility_analysis": {
"color": "yellow",
"score": 76,
"status": "prüfen",
"signals": {
"h1_count": 1,
"image_count": 23,
"button_count": 1,
"heading_count": 36,
"viewport_found": true,
"html_lang_found": true,
"form_field_count": 1,
"image_missing_alt_count": 1,
"buttons_without_name_count": 1,
"form_fields_without_label_count": 1
},
"summary": "23 Bild(er), 1 Formularfeld(er), 1 Button(s) im passiven HTML-Sample auf Basis-Barrierefreiheit geprüft.",
"findings": [
{
"id": "image_alt_missing",
"count": 1,
"title": "Bilder ohne Alternativtext",
"public": true,
"category": "accessibility",
"severity": "info"
},
{
"id": "form_label_missing",
"count": 1,
"title": "Formularfelder ohne klare Beschriftung",
"public": true,
"category": "accessibility",
"severity": "warning"
},
{
"id": "button_name_missing",
"count": 1,
"title": "Buttons ohne erkennbaren Namen",
"public": true,
"category": "accessibility",
"severity": "warning"
}
],
"wcag_matrix": {
"rows": [
{
"id": "wcag_non_text_content",
"ok": false,
"wcag": "WCAG 1.1.1 Non-text Content",
"title": "Alternativtexte für Bilder",
"impact": "mittel",
"status": "prüfen",
"evidence": "1 von 23 Bild(er) ohne alt-Text im HTML-Sample."
},
{
"id": "wcag_form_labels",
"ok": false,
"wcag": "WCAG 1.3.1 Info and Relationships / 3.3.2 Labels or Instructions",
"title": "Formularfelder beschriften",
"impact": "hoch",
"status": "prüfen",
"evidence": "1 von 1 Formularfeld(er) ohne erkennbare Beschriftung."
},
{
"id": "wcag_button_names",
"ok": false,
"wcag": "WCAG 4.1.2 Name, Role, Value",
"title": "Buttons mit Namen versehen",
"impact": "hoch",
"status": "prüfen",
"evidence": "1 von 1 Button(s) ohne erkennbaren Namen."
},
{
"id": "wcag_page_language",
"ok": true,
"wcag": "WCAG 3.1.1 Language of Page",
"title": "Seitensprache auszeichnen",
"impact": "niedrig",
"status": "ok",
"evidence": "HTML-lang-Attribut gefunden."
},
{
"id": "wcag_heading_structure",
"ok": true,
"wcag": "WCAG 1.3.1 Info and Relationships / 2.4.6 Headings and Labels",
"title": "Überschriftenstruktur",
"impact": "niedrig",
"status": "ok",
"evidence": "1 H1 und 36 Überschrift(en) im HTML-Sample."
},
{
"id": "wcag_mobile_reflow",
"ok": true,
"wcag": "WCAG 1.4.10 Reflow",
"title": "Mobile Viewport-Basis",
"impact": "niedrig",
"status": "ok",
"evidence": "Viewport-Meta-Tag gefunden."
}
],
"summary": "3 WCAG-/EAA-Prüfpunkt(e) auffällig, davon 2 mit hoher Auswirkung.",
"standard": "WCAG 2.2 orientierte Basisprüfung",
"available": true,
"issue_count": 3,
"high_impact_count": 2
}
},
"domain_history": {
"status": [
"client transfer prohibited"
],
"summary": "Die Domain existiert seit etwa 16.0 Jahren.",
"age_days": 5845,
"findings": [],
"available": true,
"registrar": "DreamHost, LLC",
"expires_at": "2027-06-12T16:40:05+00:00",
"risk_level": "low",
"registered_at": "2010-06-12T16:40:05+00:00",
"expires_in_days": 363,
"last_changed_at": "2026-05-29T17:26:12+00:00"
},
"data_entry_analysis": {
"forms": [
{
"method": "GET",
"purpose": "Name/personenbezogene Daten",
"data_types": [
{
"id": "personal",
"label": "Name/personenbezogene Daten"
}
],
"field_count": 1
},
{
"url": "https://www.deutsche-wordpress-themes.com/impressum.html",
"path": "/impressum.html",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"url": "https://deutsche-wordpress-themes.com/",
"path": "/",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/impressum.html",
"url": "https://www.deutsche-wordpress-themes.com/impressum.html"
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/",
"url": "https://deutsche-wordpress-themes.com/"
}
],
"score": 75,
"summary": "Crawl fand 2 Formular(e) auf 2 geprüften Seite(n), u. a. /impressum.html, /.",
"findings": [
{
"id": "data_entry_privacy_context_missing",
"title": "Dateneingabe ohne klaren Datenschutzkontext",
"public": true,
"category": "data_entry",
"severity": "warning"
}
],
"form_count": 2,
"risk_level": "medium",
"field_count": 1,
"asks_for_data": true,
"crawl_form_pages": [
{
"url": "https://www.deutsche-wordpress-themes.com/impressum.html",
"path": "/impressum.html",
"category": "impressum",
"form_count": 1
},
{
"url": "https://deutsche-wordpress-themes.com/",
"path": "/",
"category": "unterseite",
"form_count": 1
}
],
"payment_providers": [],
"detected_data_types": [
{
"id": "personal",
"count": 1,
"label": "Name/personenbezogene Daten"
}
],
"crawl_form_page_count": 2,
"privacy_context_found": false,
"operator_context_found": true
},
"pii_exposure_analysis": {
"color": "green",
"score": 100,
"checks": [
{
"id": "current_url",
"ok": true,
"count": 0,
"label": "Aktuelle URL",
"detail": "Keine sensiblen Query-Parameter erkannt."
},
{
"id": "link_queries",
"ok": true,
"count": 0,
"label": "Link-Parameter",
"detail": "Keine sensiblen Link-Querys erkannt."
},
{
"id": "get_forms",
"ok": true,
"count": 0,
"label": "GET-Formulare",
"detail": "Keine personenbezogenen GET-Formulare erkannt."
},
{
"id": "external_forms",
"ok": true,
"count": 0,
"label": "Externe Formularziele",
"detail": "Keine externen Formularziele mit personenbezogenen Feldern erkannt."
},
{
"id": "tracking_context",
"ok": true,
"count": 0,
"label": "Tracking neben Dateneingabe",
"detail": "Keine Kombination aus Dateneingabe und datenschutzrelevanten Drittanbietern erkannt."
}
],
"status": "unauffällig",
"summary": "0 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext.",
"findings": [],
"link_hits": [],
"finding_count": 0,
"current_url_hits": [],
"tracking_context": false,
"sensitive_get_forms": []
},
"scan_history_analysis": {
"available": false,
"summary": "Noch kein früherer gespeicherter Scan für diese Domain vorhanden.",
"total_scan_count": 1,
"previous_scan_count": 0,
"history": [
{
"scan_id": "6f043eaf-78db-48c8-8d3e-799dcbfde021",
"created_at": "2026-06-14 05:23:11.161632+02",
"score": 0,
"verdict": "riskant",
"finding_count": 150,
"integrity_root_hash": "c8019f503b0c211872c7e651f139bb65c798fe80d7a68e1fc6b22870b381eb49",
"integrity_available_hash_count": 9,
"current": true
}
],
"new_findings": [],
"resolved_findings": [],
"technical_changes": {
"available": false,
"summary": "Noch kein früherer Scan für technische Änderungen vorhanden."
}
},
"benchmark_analysis": {
"host": "deutsche-wordpress-themes.com",
"rank": 1,
"score": 0,
"status": "im_mittelfeld",
"summary": "deutsche-wordpress-themes.com liegt mit 0 Punkten ungefähr im gespeicherten Vergleichsfeld. Weil viele gespeicherte Checks bei 0 Punkten liegen, zeigt die Detailansicht zusätzlich aktive Peers mit Durchschnitt 17.6.",
"available": true,
"peer_count": 1467,
"percentile": 0,
"query_mode": "php_ttl_cache_refresh",
"distribution": {
"0_39": 1461,
"40_59": 4,
"60_79": 2,
"80_100": 0
},
"median_score": 0,
"average_score": 1,
"comparison_basis": "Neuester gespeicherter SaferPage-Scan je Domain; überwiegend deutschsprachige gespeicherte Checks.",
"same_score_count": 0,
"better_than_count": 0,
"qualified_peer_count": 86,
"zero_score_count": 1381,
"top_quartile_score": 0,
"top_decile_score": 0,
"qualified_average_score": 17.6,
"qualified_median_score": 16,
"qualified_top_quartile_score": 24,
"qualified_top_decile_score": 36,
"thresholds": [
{
"id": "critical",
"label": "Kritisch",
"range": "0-39",
"met": true
},
{
"id": "basic",
"label": "Basis stabilisieren",
"range": "40-59",
"met": false
},
{
"id": "managed",
"label": "Gesteuert",
"range": "60-79",
"met": false
},
{
"id": "strong",
"label": "Stark",
"range": "80-100",
"met": false
}
],
"risk_tier": "kritisch",
"target_score": 40,
"aspirational_target_score": 60,
"gap_to_target": 40,
"gap_to_top_quartile": 24,
"gap_to_strong": 80,
"cache_ttl_seconds": 300
},
"audit_receipt": {
"url": "https://deutsche-wordpress-themes.com/",
"host": "deutsche-wordpress-themes.com",
"status": "verfügbar",
"bot_url": "https://saferpage.de/bot",
"summary": "Prüfbeleg für deutsche-wordpress-themes.com: kontrollierter HTTP-/Browser-Kurzcheck mit 45 Request(s), 4 Consent-Zustand/Zuständen und 6 Artefakt(en).",
"renderer": "playwright-chromium",
"artifacts": [
{
"label": "Öffentlicher Kurzreport",
"detail": "https://saferpage.de/deutsche-wordpress-themes.com",
"status": "verfügbar"
},
{
"label": "JSON-Export",
"detail": "Maschinenlesbarer Report mit Modulen, Nachweisen und Tabellen.",
"status": "verfügbar"
},
{
"label": "CSV-Export",
"detail": "Tabellarische Prüfzeilen für Betreiber, Datenschutz und Technik.",
"status": "verfügbar"
},
{
"label": "160x150 Seitenvorschau",
"detail": "/cache/screenshots/deutsche-wordpress-themes.com-160x150-d1b093e74cee7c3f34.png",
"status": "verfügbar"
},
{
"label": "Empfänger-/Anbieterinventar",
"detail": "0 Anbieterzeile(n), 0 AVV-/Rollenprüfung(en).",
"status": "unauffällig"
},
{
"label": "Barrierefreiheitserklärung-Entwurf",
"detail": "3 bekannte Barrierefreiheits-Punkt(e).",
"status": "Nicht vollständig konform im automatischen Basischeck"
}
],
"available": true,
"final_url": "https://www.deutsche-wordpress-themes.com/",
"checked_at": "2026-06-14T03:23:11+00:00",
"share_text": "SaferPage Prüfbeleg deutsche-wordpress-themes.com: 45 Browser-Request(s), 0 Drittanbieter, 0 Cookie-/Storage-Einträge, geprüft am 2026-06-14T03:23:11.",
"user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)",
"limitations": [
"Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
"Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
"Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
],
"scan_context": "manual",
"coverage_items": [
{
"label": "HTTP/DNS/TLS",
"value": "HTTP 200 · DNS ok · TLS ok"
},
{
"label": "Browserlauf",
"value": "45 Request(s), 0 Drittanbieter-Domain(s), 0 Browser-Cookie(s)."
},
{
"label": "Consent-Zustände",
"value": "4 Zustand/Zustände: Default, Ablehnen, Akzeptieren und GPC soweit verfügbar."
},
{
"label": "Seitenabdeckung",
"value": "8 priorisierte Unterseite(n) im Nachweispack."
},
{
"label": "Drittanbieter-Auszug",
"value": "0 Anbieterzeile(n) im öffentlichen Nachweis."
},
{
"label": "Cookie-Auszug",
"value": "0 Cookie-Zeile(n) im öffentlichen Nachweis."
}
],
"confidence_score": 87,
"browser_final_url": "https://www.deutsche-wordpress-themes.com/"
},
"evidence_integrity_manifest": {
"host": "deutsche-wordpress-themes.com",
"status": "verfügbar",
"summary": "Integritätsmanifest für deutsche-wordpress-themes.com: 9/9 Nachweisbereich(e) mit SHA-256-Hash dokumentiert.",
"sections": [
{
"id": "audit_receipt",
"hash": "72f4b47e1cafb48dd9f632e2e7f24abe9ac16d6ef2e9283611444d8e9fbe78f7",
"count": 18,
"label": "Prüfbeleg",
"detail": "Kanonischer JSON-Hash des kompakten Prüfbelegs.",
"status": "verfügbar"
},
{
"id": "protocol",
"hash": "0ed66b73558ef41b5c443fe8096458a5df09ab1dee9361396187a38de818cf6b",
"count": 15,
"label": "Scan-Protokoll",
"detail": "URL, Endziel, User-Agent, Zeitstempel, HTTP/DNS/TLS und Renderer.",
"status": "verfügbar"
},
{
"id": "checkpoints",
"hash": "c369995442f2316f91989a2fd6d42dc8ad4beef9f9947f1878a3b6c33be2060c",
"count": 6,
"label": "Prüfschritte",
"detail": "Kanonischer JSON-Hash der dokumentierten Prüfstationen.",
"status": "verfügbar"
},
{
"id": "consent_states",
"hash": "4c6fd8288209437d4d29b7db6ad596252434052f1571b72aba7b0bcdb0aed8a7",
"count": 4,
"label": "Consent-Zustände",
"detail": "Default-, Ablehnen-, Akzeptieren- und GPC-Nachweise soweit verfügbar.",
"status": "verfügbar"
},
{
"id": "third_party_evidence",
"hash": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
"count": 0,
"label": "Drittanbieter-Auszug",
"detail": "Sanitisierte Anbieter-, Kategorie-, Transfer- und Request-Zählwerte.",
"status": "leer"
},
{
"id": "cookie_evidence",
"hash": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
"count": 0,
"label": "Cookie-Auszug",
"detail": "Sanitisierte Cookie-Metadaten ohne Cookie-Werte.",
"status": "leer"
},
{
"id": "request_samples",
"hash": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
"count": 0,
"label": "Request-Samples",
"detail": "Sanitisierte Drittanbieter-Samples ohne vollständige Request-URLs.",
"status": "leer"
},
{
"id": "checked_pages",
"hash": "d6ae4020094a021ae2b291d595db226daf1a79d76a7b83ae7c005e3092c39316",
"count": 8,
"label": "Geprüfte Unterseiten",
"detail": "Priorisierte Pfade aus Sitemap, Pflichtseiten und interner Linkstruktur.",
"status": "verfügbar"
},
{
"id": "screenshot_file",
"hash": "01bfea535ffa2be52b41ca941515d41dc99153544aab7db85fc4aba5f886fce1",
"count": 12044,
"label": "160x150 Seitenvorschau-Datei",
"detail": "/cache/screenshots/deutsche-wordpress-themes.com-160x150-d1b093e74cee7c3f34.png",
"status": "verfügbar"
}
],
"algorithm": "sha256",
"available": true,
"root_hash": "c8019f503b0c211872c7e651f139bb65c798fe80d7a68e1fc6b22870b381eb49",
"checked_at": "2026-06-14T03:23:11+00:00",
"limitations": [
"Das Manifest schützt die im Report veröffentlichten/sanitisierten Nachweise, nicht verdeckte Cookie-Werte oder vollständige Request-URLs.",
"Ohne externe qualifizierte Zeitstempelung beweist der Hash Integrität des exportierten Artefakts, aber keine amtliche Zustellung."
],
"section_count": 9,
"canonicalization": "JSON UTF-8, sort_keys=true, kompakte Separatoren; Screenshot als rohe Datei-Bytes.",
"available_hash_count": 9
},
"audit_evidence_pack": {
"status": "verfügbar",
"summary": "Nachweisprotokoll mit 45 Browser-Request(s), 0 Cookie-Nachweis(en), 0 Drittanbieter-Auszug/auszügen und 4 Consent-Zustand/Zuständen.",
"protocol": {
"host": "deutsche-wordpress-themes.com",
"dns_ok": true,
"tls_ok": true,
"bot_url": "https://saferpage.de/bot",
"renderer": "playwright-chromium",
"final_url": "https://www.deutsche-wordpress-themes.com/",
"input_url": "https://deutsche-wordpress-themes.com/",
"checked_at": "2026-06-14T03:23:11+00:00",
"user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)",
"http_status": 200,
"scan_context": "manual",
"screenshot_url": "/cache/screenshots/deutsche-wordpress-themes.com-160x150-d1b093e74cee7c3f34.png",
"googlebot_status": 200,
"browser_final_url": "https://www.deutsche-wordpress-themes.com/",
"dns_address_count": 4
},
"checkpoints": [
{
"label": "DNS",
"detail": "4 Adresse(n) aufgelöst.",
"status": "ok"
},
{
"label": "TLS/HTTPS",
"detail": "TLSv1.3",
"status": "ok"
},
{
"label": "HTTP-Abruf",
"detail": "Status 200, Endziel https://www.deutsche-wordpress-themes.com/.",
"status": "ok"
},
{
"label": "Browserlauf",
"detail": "45 Request(s), 0 Drittanbieter-Domain(s).",
"status": "ok"
},
{
"label": "Consent-Zustände",
"detail": "Default, Ablehnen, Akzeptieren und GPC werden soweit möglich gegenübergestellt.",
"status": "unauffällig"
},
{
"label": "Exports",
"detail": "PDF/Druck, JSON und CSV enthalten die wesentlichen Prüfnachweise.",
"status": "verfügbar"
}
],
"limitations": [
"Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
"Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
"Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
],
"checked_pages": [
{
"path": "/impressum.html",
"source": "homepage_link",
"status": 0,
"category": "impressum"
},
{
"path": "/terms.html",
"source": "sitemap",
"status": 0,
"category": "agb"
},
{
"path": "/terms.html",
"source": "homepage_link",
"status": 0,
"category": "agb"
},
{
"path": "/",
"source": "sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/144-ocean-mist-1-2-deutsch.html",
"source": "sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/193-typo-1-1-deutsch.html",
"source": "sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/866-cecilia-blue-v1-0-deutsch.html",
"source": "sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/869-cecilia-brown-v1-0-deutsch.html",
"source": "sitemap",
"status": 0,
"category": "unterseite"
}
],
"cookie_evidence": [],
"browser_evidence": {
"gpc_enabled": true,
"request_count": 45,
"storage_total": 0,
"accept_clicked": false,
"reject_clicked": false,
"browser_cookie_count": 0,
"contacted_domain_count": 1,
"third_party_domain_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
"storage_evidence": {
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 0
},
"third_party_evidence": [],
"external_script_count": 0,
"consent_state_evidence": [
{
"label": "Erstaufruf",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "Nach Ablehnen neu",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "Nach Akzeptieren neu",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "GPC-Aufruf",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
}
],
"request_sample_evidence": []
}
}
