WpScan

This tool is used for scanning vulnerabilities in WordPress sites.

For normal scanning:

wpscan --url http://$WEBSRV1 --api-token <YOUR_TOKEN> -o wpscan_result

To get API Token Register online.

https://wpscan.com/register/

(Temp-mail supported)

For Aggressive plugin scanning:

wpscan --url http://$WEBSRV1 --api-token <Your_Token> --enumerate p --plugins-detection aggressive -o wpscan_result