Function parse_vulns_array

src/wpscan.rs:504–552

(
    vulns_value: Option<&serde_json::Value>,
    component: &str,
)

}

fn parse_vulns_array(
    vulns_value: Option<&serde_json::Value>,
    component: &str,
) -> Vec<WPVulnerability> {
    let mut vulns = Vec::new();

    if let Some(arr) = vulns_value.and_then(|v| v.as_array()) {
        for vuln in arr {
            let title = vuln
                .get("title")
                .and_then(|t| t.as_str())
                .unwrap_or("Unknown")
                .to_string();

            let vuln_type = vuln
                .get("vuln_type")
                .and_then(|t| t.as_str())
                .unwrap_or("unknown")
                .to_string();

            // WPScan uses "cvss" or infer severity from vuln_type
            let severity = infer_severity(&title, &vuln_type, vuln);

            let cve = vuln
                .get("references")
                .and_then(|r| r.get("cve"))
                .and_then(|c| c.as_array())
                .and_then(|arr| arr.first())
                .and_then(|v| v.as_str())
                .map(|s| format!("CVE-{}", s));

            let fixed_in = vuln
                .get("fixed_in")
                .and_then(|f| f.as_str())
                .map(|s| s.to_string());

            vulns.push(WPVulnerability {
                title,
                vuln_type,
                severity,
                cve,
                fixed_in,
                component: component.to_string(),
            });
        }
    }

    vulns
}

fn infer_severity(
    title: &str,