High-risk tools in Hostinger Api
34 of the 258 tools in Hostinger Api are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
agency-hosting_buildAgencyPlanWebsiteNodeJSAssetsV1ExecuteBuilds and deploys a Node.js application for an Agency Plan website from an already-uploaded archive. Upload the archive to file browser first, then provide its relative path f...
-
hosting_activateWordPressPluginV1ExecuteActivate an installed plugin on a WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtained from GET /api/hosting/v1/word...
-
hosting_createLoginLinksV1ExecuteCreate temporary auto-login links for the specified WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtained from GET /a...
-
hosting_createNodeJSBuildFromArchiveV1ExecuteUpload a project archive, auto-detect build settings, and immediately start a Node.js build. This is the recommended single-step approach for deploying a Node.js application. T...
-
hosting_deactivateWordPressPluginV1ExecuteDeactivate an installed plugin on a WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtained from GET /api/hosting/v1/wo...
-
hosting_deployJsApplicationExecuteDeploy a JavaScript application from an archive file to a hosting server. IMPORTANT: the archive must ONLY contain application source files, not the build output, skip node_modu...
-
hosting_deployStaticWebsiteExecuteDeploy a static website from an archive file to a hosting server. IMPORTANT: This tool only works for static websites with no build process. The archive must contain pre-built s...
-
hosting_deployWordpressPluginExecuteDeploy a WordPress plugin from a directory to a hosting server. This tool uploads all plugin files and triggers plugin deployment.
-
hosting_deployWordpressThemeExecuteDeploy a WordPress theme from a directory to a hosting server. This tool uploads all theme files and triggers theme deployment. The uploaded theme can optionally be activated af...
-
hosting_detectWordPressInstallationsV1ExecuteTrigger a background scan to detect WordPress installations for the account. This operation is asynchronous: a successful response only means the scan has been queued. Poll GET...
-
hosting_installWordPressPluginsV1ExecuteInstall one or more plugins on an existing WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtained from GET /api/hostin...
-
hosting_installWordPressThemeV1ExecuteInstall a theme on an existing WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtained from GET /api/hosting/v1/wordpre...
-
hosting_installWordPressV1ExecuteInstall WordPress on an existing website. The website must already exist before calling this endpoint. To create a new website first, use POST /api/hosting/v1/websites and poll...
-
hosting_purgeLiteSpeedCacheV1ExecutePurge the LiteSpeed Cache for the specified WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtained from GET /api/hosti...
-
hosting_repairDatabaseV1ExecuteRepairs corrupted database tables asynchronously. Use when database errors, crashes, or corruption are reported. The database name must be the full name returned by the list da...
-
hosting_restartNode_jsApplicationV1ExecuteRestarts the Node.js server process for the website. Does not rebuild or redeploy the application. Use it to apply environment or configuration changes, or to recover a hung app...
-
hosting_updateHostingerWordPressPluginV1ExecuteUpdate a Hostinger plugin to its latest version on a WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtained from GET /...
-
hosting_updatePHPVersionV1ExecuteChanges the PHP version of the website. Use the Get PHP details endpoint to see the versions available for the website.
-
hosting_updateWordPressPluginsV1ExecuteUpdate one or more installed plugins to their latest version on a WordPress installation. Provide the WordPress installation (software) identifier in the path. It can be obtain...
-
VPS_activateFirewallV1ExecuteActivate a firewall for a specified virtual machine. Only one firewall can be active for a virtual machine at a time. Use this endpoint to apply firewall rules to VPS instances.
-
VPS_createNewProjectV1ExecuteDeploy new project from docker-compose.yaml contents or download contents from URL. URL can be Github repository url in format https://github.com/[user]/[repo] and it will be ...
-
VPS_deactivateFirewallV1ExecuteDeactivate a firewall for a specified virtual machine. Use this endpoint to remove firewall protection from VPS instances.
-
VPS_installMonarxV1ExecuteInstall the Monarx malware scanner on a specified virtual machine. [Monarx](https://www.monarx.com/) is a security tool designed to detect and prevent malware infections on vir...
-
VPS_restartProjectV1ExecuteRestarts all services in a Docker Compose project by stopping and starting containers in the correct dependency order. This operation preserves data volumes and network configu...
-
VPS_restartVirtualMachineV1ExecuteRestart a specified virtual machine by fully stopping and starting it. If the virtual machine was stopped, it will be started. Use this endpoint to reboot VPS instances.
-
VPS_setupPurchasedVirtualMachineV1ExecuteSetup newly purchased virtual machine with `initial` state. Use this endpoint to configure and initialize purchased VPS instances.
-
VPS_startProjectV1ExecuteStarts all services in a Docker Compose project that are currently stopped. This operation brings up containers in the correct dependency order as defined in the compose file....
-
VPS_startRecoveryModeV1ExecuteInitiate recovery mode for a specified virtual machine. Recovery mode is a special state that allows users to perform system rescue operations, such as repairing file systems,...
-
VPS_startVirtualMachineV1ExecuteStart a specified virtual machine. If the virtual machine is already running, the request will still be processed without any effect. Use this endpoint to power on stopped VPS...
-
VPS_stopProjectV1ExecuteStops all running services in a Docker Compose project while preserving container configurations and data volumes. This operation gracefully shuts down containers in reverse de...
-
VPS_stopRecoveryModeV1ExecuteStop recovery mode for a specified virtual machine. If virtual machine is not in recovery mode, this operation will fail. Use this endpoint to exit system rescue mode and retu...
-
VPS_stopVirtualMachineV1ExecuteStop a specified virtual machine. If the virtual machine is already stopped, the request will still be processed without any effect. Use this endpoint to power off running VPS...
-
VPS_syncFirewallV1ExecuteSync a firewall for a specified virtual machine. Firewall can lose sync with virtual machine if the firewall has new rules added, removed or updated. Use this endpoint to appl...
-
VPS_updateProjectV1ExecuteUpdates a Docker Compose project by pulling the latest image versions and recreating containers with new configurations. This operation preserves data volumes while applying ch...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.