π‘ Pick it for technical WordPress vulnerability scanning, automation, and penetration-testing workflows.
WPScan is a WordPress-focused vulnerability scanner for penetration testers, security teams, and site administrators. Its CLI identifies vulnerable WordPress core versions, plugins,...
Pros
- Deep WordPress-specific detection for core, plugins, and themes
- Combines a command-line scanner with a vulnerability database API
- Well suited to CI pipelines and penetration-testing workflows
Cons
- Requires command-line and security-testing knowledge
- API usage limits can restrict large-scale scanning
- Does not provide a full WordPress firewall or remediation workflow
Free CLI; API has a free tier and paid plans