security enabled verified medium v1.0.0

wpscan

Black-box WordPress vulnerability scanner that detects themes, plugins, users, and security misconfigurations.

📋 Live Preview

wpscan --url {target} -e

🌍 target → url

wpscan --url {target} -e

Sandbox: execFile · Timeout: 600s

Capabilities

web.scan.wordpress

web.discovery.plugin

web.discovery.theme

web.discovery.user

security.vulnerability.scan

Parameters

Name	Type	Required	Default	Description	Aliases
`url`	string	Yes	-	Target WordPress URL (--url)	`--url`
`enumerate`	string	No	vp,vt	Enumeration options (-e)	`-e`
`plugins-detection`	string	No	passive	Plugin detection mode (--plugins-detection)	`--plugins-detection`
`api-token`	string	No	-	WPScan API token (--api-token)	`--api-token`
`passwords`	string	No	-	Password file for brute force (--passwords)	`--passwords`
`usernames`	string	No	-	Username file (--usernames)	`--usernames`
`threads`	integer	No	5	Number of threads (-t)	`-t`
`verbose`	boolean	No	-	Verbose output (-v)	`-v`
`batch`	boolean	No	-	Never ask for user input (--batch)	`--batch`
`random-user-agent`	boolean	No	-	Random User-Agent (--random-user-agent)	`--random-user-agent`
`proxy`	string	No	-	Proxy URL (--proxy)	`--proxy`
`cookie`	string	No	-	Cookie string (--cookie)	`--cookie`
`headers`	string	No	-	Custom HTTP headers (--headers)	`--headers`
`detection-mode`	string	No	mixed	Detection mode (--detection-mode)	`--detection-mode`
`force`	boolean	No	-	Force scan even if not WordPress (--force)	`--force`
`exclude_content_based`	boolean	No	-	Exclude by content regex	`--exclude-content-based`
`h`	boolean	No	-	Show this help	`-h`, `--help`
`ignore_main_redirect`	boolean	No	-	Ignore redirect to main site	`--ignore-main-redirect`
`plugins_version_detection`	boolean	No	-	Plugin version detection mode	`--plugins-version-detection`
`stealthy`	boolean	No	-	Stealthy mode (low and slow)	`--stealthy`
`user_agent`	boolean	No	-		`--user-agent`, `-Agent`

Artifacts

Type	Description	MIME	Schema	Trust
`web.wpscan.report`	WordPress vulnerability scan report	text/plain	-	verified

Contract

Inputs

web.target.url

Target WordPress URL

Outputs

web.wpscan.results

Vulnerability scan results

Side effects: network_traffic

Workflow Edges

Produces

web.wpscan.results

Consumes

web.target.url

Resource Profile

Resource	Value
CPU	medium
Memory	128 MB
Network	medium
Disk I/O	low

Examples

Basic WordPress scan

wpscan --url http://target.com --batch

Enumerate vulnerabilities and users

wpscan --url http://target.com -e vp,vt,u --batch

Brute force user passwords

wpscan --url http://target.com --usernames users.txt --passwords rockyou.txt

Use stealthy mode

wpscan --url http://target.com --stealthy

With API token for vulnerability database

wpscan --url http://target.com --api-token YOUR_TOKEN -e vp,vt

Documentation

WPScan — WordPress Vulnerability Scanner

WPScan is a black-box WordPress vulnerability scanner that identifies security issues by enumerating themes, plugins, users, and checking for known vulnerabilities.

Basic Usage

# Basic scan
wpscan --url http://target.com --batch

# Enumerate vulnerable plugins, themes, and users
wpscan --url http://target.com -e vp,vt,u --batch

Enumeration Options

Flag	Description
`-e vp`	Vulnerable plugins
`-e vt`	Vulnerable themes
`-e u`	Users
`-e ap`	All plugins
`-e at`	All themes
`-e cb`	Config backups
`-e tt`	Timthumb files
`-e dbe`	Database exports

Modes

# Stealthy (low and slow)
wpscan --url http://target.com --stealthy

# Aggressive detection
wpscan --url http://target.com --detection-mode aggressive

# Force scan non-WordPress sites
wpscan --url http://target.com --force

Related Tools

joomscancmsmap