Skills
.Work. You
Rest

wordpress-plugin-hunt

Community

Hunt WordPress plugins and find exploitable CVEs.

Software Engineering#wordpress#cve#penetration-testing#vulnerability-scanning#recon#plugin-hunt
Authoruphiago
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Manually identifying installed WordPress plugins and their associated CVEs is time-consuming and error-prone for security professionals conducting penetration tests or reconnaissance on WordPress targets.

Core Features & Use Cases

  • Multi-method plugin detection: Probes 40+ common plugin REST API namespaces, checks readme.txt for version data, and scans HTML/JS source for plugin fingerprints.
  • CVE cross-referencing: Automatically flags outdated plugin versions with known exploitable vulnerabilities including RCE, SQLi, and privilege escalation for high-risk plugins like Slider Revolution, Elementor, and Gravity Forms.
  • Use case: For a penetration test targeting a WordPress e-commerce site, use this skill to quickly identify outdated WooCommerce or LiteSpeed Cache instances with publicly available exploit PoCs.

Quick Start

Use the wordpress-plugin-hunt skill to scan the target WordPress site example.com for installed plugins and check if any have known exploitable CVEs.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: wordpress-plugin-hunt
Download link: https://github.com/uphiago/recon-skills/archive/main.zip#wordpress-plugin-hunt

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.