WPScan

Description

WPScan is a black-box WordPress vulnerability scanner that detects known vulnerabilities in WordPress core, plugins, and themes. It enumerates users, performs password brute-forcing, and checks for security misconfigurations using a constantly updated vulnerability database.

Use Cases

• Scan WordPress sites for known plugin and theme vulnerabilities
• Enumerate WordPress users and test for weak passwords
• Detect security misconfigurations in WordPress installations

Attack Phases

MITRE ATT&CK Techniques (2)