Scan WordPress websites for vulnerabilities, users, plugins, and known CVEs.
npx skills add https://github.com/AeonDave/malskill --skill wpscan
Please help me install this Agent Skill. Skill: wpscan Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/vuln-scanners/wpscan Command: npx skills add https://github.com/AeonDave/malskill --skill wpscan
This Skill identifies security vulnerabilities and misconfigurations in WordPress websites, helping to secure them against attacks.
Scan the WordPress site at https://example.com for vulnerabilities and enumerate users.
High-intent search queries and answers about installing and using this skill.
To scan a WordPress site for security vulnerabilities, you can use this Skill to detect known CVEs in the core, themes, and plugins. It requires the Ruby environment and the WPScan gem to execute the penetration testing checks.
Yes, you can enumerate valid WordPress users, plugins, and themes during a penetration test. This Skill identifies valid usernames and checks installed components against a database of known vulnerabilities to assess the site's security posture.
An API token is optional but recommended for checking WordPress CVEs. While the Skill can perform vulnerability scanning and configuration checks without it, an API token provides enhanced access to the vulnerability database for more comprehensive security audit results.
The best way to find misconfigurations in a WordPress installation is to run a targeted security audit using this Skill. It verifies common security misconfigurations and identifies outdated core, themes, or plugins that leave the site exposed to attacks.
No, WordPress vulnerability scanning with this Skill does not work without Ruby installed. It explicitly requires the Ruby environment and the WPScan gem to execute its enumeration and vulnerability detection processes.
You use a WordPress vulnerability scanner for a security audit to quickly identify if a site is compromised or outdated. This Skill detects known vulnerabilities and configuration issues, helping you secure WordPress installations against potential attacks.
sjinksRetrieve WPScan vulnerability details by ID or slug for WordPress triage.
uphiagoAutomates WordPress vulnerability auditing by extracting plugin versions and matching CVEs from batches of target domains.
Ed1s0nZExecute network penetration testing phases with Nmap, Nessus, and Metasploit.
cxnaivePerform authorized web application penetration testing with reconnaissance, vulnerability analysis, and proof-based exploitation.
