wpscan
WordPress security scanner - enumerates plugins, themes, users, and known vulnerabilities. Needs an API token for vuln data.
Tags: wordpress, scanner, ruby
- Category
- cms
- Maintenance signal
- maintained
Project repository · Documentation
Use this when: Misconfig. A version or default path is inventory until it exposes data.
Install
gem
gem install wpscanCommand templates
Enumerate
wpscan --url {url} --enumerate {enum} --api-token {token}