WPScan
WordPress scanner: users, themes and vulnerable plugins.
A WordPress-specialised scanner. It enumerates the core version, plugins and themes (with their known vulnerabilities) and users, and can brute-force passwords. A free API token is needed to see the CVEs.
Family Web discovery & fuzzing
Flags --enumerate u,vp --api-token
Concepts WordPress plugin LFI, WP Advanced Search SQLi (CVE-2024-9796)
Cheatsheet CMS (WordPress, Drupal, Joomla)
Installation
sudo apt install -y wpscan
# free API token at wpscan.com for vulnerability dataUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- LolyProving Grounds Play
- NukemProving Grounds Practice
- ReadysProving Grounds Practice
- Symfonos 1 & 2VulnHub
- WorkaholicProving Grounds Practice