Find security weaknesses in WordPress sites.
What it does
Guides authorized security assessments of WordPress sites, producing enumeration, vulnerability, credential, and exploitation findings.
When to use it
Use for authorized security assessments, defensive validation, or controlled educational testing of WordPress installations.
How to use it
Give it a target and authorized scope; it produces security assessment findings, requiring explicit confirmation of commands before testing.
What you provide
- the target URL, IP, or resource
- written authorization and scope
Uses
Good to know
- cannot be undone: WordPress
What you need · 7
Requires WPScan for WordPress scanning and enumeration.
Lists Metasploit Framework as required for the exploitation workflow.
Requires Burp Suite or OWASP ZAP; either tool satisfies this listed requirement.
Access · 1
This skill
WordPress
Shell exploits against WordPress
Attacks and modifies WordPress sites (irreversible)