WordPress security tools
Vane (WordPress vulnerability scanner)
Vane is a forked project of the now non-free popular WordPress vulnerability scanner WPScan.
Wordpresscan (WordPress vulnerability scanner)
Wordpresscan is a security scanner for WordPress installations. It is based on the work of WPScan with some ideas inspired by the WPSeku project.
WordPress Exploit Framework (WordPress exploiting toolkit)
The WordPress Exploit Framework (WPXF) is a framework written in Ruby. As the name implies, it aids in pentesting WordPress installations.