This repository contains a WP-CLI command-line tool for scanning WordPress installations for known vulnerabilities. It integrates with three vulnerability databases: WPScan, Patchstack, and Wordfence Intelligence, allowing users to check WordPress core, plugins, and themes for security issues through a unified interface. The architecture follows a service pattern where each vulnerability provider has its own service class extending a base service class. The main Vulnerability_CLI class handles command registration, argument parsing, output formatting, and coordination with the appropriate service based on configuration. The tool supports multiple output formats (table, CSV, JSON, count, IDs, YAML) and includes features like Nagios monitoring output and email notifications for automated scanning. Although the project is explicitly marked as archived and no longer actively maintained, it demonstrates solid engineering practices with clear separation of concerns, proper error handling, and comprehensive testing through Behat scenarios for each supported vulnerability provider.

The LLM identified 1 files worth highlighting for reuse: