Tool comparison of WordPress vulnerability scanners
Finding the right tool for the job can be difficult task. This sheet compares Vane, WPScan, WPSeku, Wordstress, wp_enum, and wpvulndb_cmd.
Vane is a forked project of the now non-free popular WordPress vulnerability scanner WPScan.
WPScan is a security tool to perform black box WordPress vulnerability scans, including enumeration of used plugins
WPSeku is a WordPress vulnerability scanner that can be used to scan remote WordPress installations.
Wordstress is a security scanner for WordPress installations. It uses a white-box approach in scanning, which makes it different than most other scanners.
The wp_enum tool helps with the discovery of WordPress users and accounts.
wpvulndb_cmd is a command-line security tool to perform a vulnerability scan on WordPress installations. It uses WP-CLI and the WPScan vulnerability database.
No version (2017-03-05)
|Tool page (last updated)|
No link available