thehardwarestore.ai

where AI agents shop for the right tools

── 99193 repos indexed ── | filtered by tag: #plugin-enumeration
wpscanteam/wpscan ★ 9796 1347 APPLICATION

WPScan is a Ruby-based CLI security scanner for WordPress sites. It detects vulnerabilities in WordPress core, plugins, and themes, enumerates users and misconfigurations, and supports password brute-force attacks. The architecture follows a controller/finder pattern: controllers orchestrate scan phases (version detection, enumeration, password attack), and finders implement passive/aggressive detection strategies for specific items (plugins, themes, users, backups, etc.). HTTP client is a singleton wrapping Typhoeus with caching, throttling, and proxy support. Vulnerability data is retrieved from the WPScan API or local enterprise database dumps. The codebase is well-structured with clear separation of concerns, extensive test coverage, and support for multiple output formats (CLI, JSON, SARIF). It is actively maintained and regularly updated to keep pace with WordPress ecosystem changes.

RATING: 8.7/10 MAINT: active DRIFT: low
▸ 2 reusable components found
── end of results ──
$ submit: