Ravi Sir's Cyber Security Cards › Revision Cards
WPScan: Scanning WordPress
WPScan: Scanning WordPress WPScan is a scanner just for WordPress sites. It checks the version, themes, plugins and users for known bugs. It uses a vulnerability database. A free API token raises the daily limit. Most WordPress breaches come from outdated plugins , not the core. Keep plugins updated
Read card text
What this card says
What it is
WPScan is a scanner just for WordPress sites. It checks the version, themes, plugins and users for known bugs.
How it works
It uses a vulnerability database. A free API token raises the daily limit.
Why it matters for security
Most WordPress breaches come from outdated plugins, not the core.
Keep plugins updated and remove unused ones.
Learn more in the lesson: 21.7 WPScan: Scanning WordPress