WordPress Penetration Testing
This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". It provides comprehensive WordPress security assessment methodologies.
Target: Cloud, operations & security. Automatically collected · unverified.
Excerpt from the author’s documentation
Extracted from a fixed version of SKILL.md in its original language. This is the author’s documentation; installation, compatibility and runtime results have not been verified by this site.
Read the original English text
Topics in the source
- WordPress Penetration Testing
- Purpose
- Prerequisites
- Required Tools
- Required Knowledge
- Outputs and Deliverables
- Core Workflow
- Phase 1: WordPress Discovery
Conduct comprehensive security assessments of WordPress installations including enumeration of users, themes, and plugins, vulnerability scanning, credential attacks, and exploitation techniques. WordPress powers approximately 35% of websites, making it a critical target for security testing. WPScan (pre-installed in Kali Linux) Metasploit Framework Burp Suite or OWASP ZAP Nmap for initial discovery cURL or wget WordPress architecture and structure Web application testing fundamentals HTTP protocol understanding Common web vulnerabilities (OWASP Top 10) 1. WordPress Enumeration Report - Version, themes, plugins, users 2. Vulnerability Assessment - Identified CVEs and misconfigurations 3. Credential Assessment - Weak password findings 4. Exploitation Proof - Shell access documentation Identify WordPress installations: Key WordPress files and directories: /wp-admin/ - Admin dashboard /wp-login.php - Login page /wp-content/ - Themes, plugins, uploads /wp-includes/ - Core files /xmlrpc.php - XML-RPC interface /wp-config.php - Configuration (not accessible if secure) /readme.html - Version information Comprehensive WordPress scanning with WPScan: Identify WordPress version: Version sour
This is an excerpt. Refer to the complete source and its current requirements.
- Source repository
- davila7/claude-code-templates
- Source file
- cli-tool/components/skills/security/wordpress-penetration-testing/SKILL.md
- Fixed revision
- 21be197f100a12b8d0dd9a211cc244c8179f84d3
Sources and evidence
This record was collected automatically. Its documentation, suitability and runtime behavior have not been manually verified.
Author: davila7/claude-code-templates · original repository metadata. Documentation review: Not reviewed. Last source check: 2026-11-09T15:01:40.668Z.
Categories are inferred from names, descriptions and paths. They do not establish compatibility.
License and attribution
MIT. Third-party content and copyright remain with their authors. Refer to the original license and terms.
Original license ↗Synchronization, copying and user-reported success do not mark a resource as runtime-tested.
Limitations and notes
- Collecting metadata does not mean this site has installed, adapted, runtime-tested or security-reviewed the resource.