All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

WPScan rewritten in Python + some WPSeku ideas

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

Wordpress Vulnerability Scanner

Fastest tool to find username and password brute forcing.

WordPress Website Scanner Tool

Fast and stealth WordPress scanner, no api-key, no limitation. Use the top-notch free open-source API www.wpvulnerability.net I'm looking for contributors helping me to dev an auto-exploit module.

uscan is a web scanner designed to target systems such as WordPress, Joomla, Drupal, and Vbulletin. It uses automation to identify vulnerabilities in a target system, making it a more efficient and effective

A very basic WordPress files and directories scanner

CMS scanner (Wordpress, Joomla, Drupal...)

Mass Vulnerability Scanner For WordPress

Nemoscan is a script For Get Information About Targets Using Online API That Perform Speed Nmap, geoip ,dnslookup,whois,reverse_ip_lookup include In a directory-fuzzer

Compare the files and folders of the original source code of WordPress against a website

A vulnerability Scanner and Exploiter for Wordpress based on CVE 2024-10924

Modular, AI-powered, and powerful WordPress auditing and scanning tool for security, and configuration checks. 🛡

Bulk WordPress discovery tool. Generate domain lists, scan in parallel, find WP sites.

A basic Python3 based WordPress Penetrator Discord Bot.

Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shafiei (EbraSha) for cybersecurity research, penetration testing, and WordPress security assessment.

Servidor de pruebas para bug bounty. Simula un portal de empleo con APIs, panel admin oculto, backups expuestos, configuración interna y rutas secretas. Diseñado para practicar path traversal y reconocimiento con PathTraversalBot.