← All Kali Commands
🌐 Web Application WPScan

Vulnerable plugins

WPScan command for vulnerable plugins. Copy the command below and use it in your terminal.

wpscan — terminal
┌──(kali㉿kali)-[~]
└─$ wpscan --url http://target --enumerate vp
Tool
WPScan
Category
Web Application
Purpose
Vulnerable plugins

🛡️ Usage Tips

  • Always ensure you have proper authorization before using WPScan against any target
  • Replace target with the actual IP address or hostname you are testing
  • Run this command from a Kali Linux terminal or any system with WPScan installed
  • Combine with other WPScan commands for more comprehensive results
  • Pipe output to a file with > output.txt for later analysis

🔗 More WPScan Commands

wpscan --url http://target
Basic WordPress scan
wpscan --url http://target --enumerate ap,u
All plugins and users
wpscan --url http://target -U admin -P rockyou.txt
Login brute force
wpscan --url http://target --api-token TOKEN
With WPVulnDB API
wpscan --url http://target --enumerate vt
Vulnerable themes
wpscan --url http://target --enumerate cb
Config backups
wpscan --url http://target --enumerate dbe
DB exports
wpscan --url http://target --enumerate m
Media enumeration
wpscan --url http://target --enumerate tt
TimThumbs
wpscan --url http://target --enumerate u1-100
Users ID 1-100
wpscan --url http://target --plugins-detection aggressive
Aggressive plugin scan
wpscan --url http://target --random-user-agent
Random user agent

🌐 Other Web Application Tools

SQLMap Gobuster ffuf Nikto BurpSuite OWASP ZAP
📚 Learn Kali Linux — Free Course