---
title: "List installed WordPress plugins"
method: GET
path: "/api/hosting/v1/accounts/{username}/wordpress/{software}/plugins"
tags: ["WordPress: Plugins"]
---

# List installed WordPress plugins

`GET /api/hosting/v1/accounts/{username}/wordpress/{software}/plugins`

List plugins installed on a WordPress installation, including their status,
available updates and known vulnerabilities.

Provide the WordPress installation (software) identifier in the path. It can
be obtained from GET /api/hosting/v1/wordpress/installations (the `id` field).

## Path parameters

- `username` string, required
- `software` string, required

## Query parameters

- `category` 'cache', nullable

## Response `200`

Success response

- WordPressV1PluginsInstalledPluginResource[] — Array of [`WordPress.V1.Plugins.InstalledPluginResource`](#model/wordpressv1pluginsinstalledpluginresource)
  - `name` string — Plugin slug
  - `title` string — Human readable plugin name
  - `version` string — Installed plugin version
  - `status` 'active' | 'inactive' — Whether the plugin is active or inactive
  - `update` string — Available update version, or "none" when up to date
  - `vulnerabilities` WordPressV1CommonVulnerabilityResource[] — Known vulnerabilities affecting the installed version
    - `title` string — Short title of the vulnerability
    - `description` string — Details about the vulnerability
    - `affected_in` string — Version in which the vulnerability was introduced or is present
    - `fixed_in` string — Version in which the vulnerability was fixed
    - `direct_url` string — Link to the vulnerability advisory

## Other responses

- `401` — Unauthenticated response
- `500` — Error response

---

[API](https://skmtc.dev/hostinger/apis/hostinger-api.md) · [All operations](https://skmtc.dev/hostinger/apis/hostinger-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hostinger/hostinger-api/revisions/53ccee45e5eb/schema)