Security Notice: This tool helps identify potential vulnerabilities but should be used responsibly with proper authorization.
WordPress Vulnerability Scanner
A comprehensive security tool to scan WordPress sites for vulnerabilities and security issues
TLS/SSL Checks
Plugin Detection
Auto-Fix Suggestions
🚀 Quick Start
Local Installation
Get started quickly with npm or yarn
# Clone the repository
git clone https://github.com/yourrepo/wp-vulnerability-scanner.git
cd wp-vulnerability-scanner
# Install dependencies
npm install
# Start the scanner
node server.js
Docker Installation
Run the scanner in a containerized environment
# Build the Docker image
docker build -t wp-scanner .
# Run the container
docker run -p 3000:3000 wp-scanner
💻 Usage
Basic Scan
# Run a basic scan
npm run scan -- --target=https://yoursite.com
Generate Reports
# Generate PDF report
npm run report -- --format=pdf
# Generate HTML report
npm run report -- --format=html
🌐 Web Integration
Embed the scanner directly in your web application with our JavaScript SDK.
<div id='wp-scanner'></div>
<script src="https://cdn.yourdomain.com/scanner.min.js"></script>
<script>
WPScanner.init({
apiKey: 'YOUR_API_KEY',
theme: 'dark', // or 'light'
onComplete: function(report) {
console.log('Scan completed:', report);
}
});
</script>
✨ Features
- Security Comprehensive TLS/SSL configuration checks including certificate validity, protocol support, and cipher strength
- Detection Advanced plugin and theme vulnerability detection using the WPScan vulnerability database
- Analysis User enumeration detection and WordPress version disclosure checks
- Reporting Detailed PDF and HTML reports with vulnerability severity ratings and fix recommendations
🤝 Contributing
We welcome contributions from the community! Here's how you can help improve the WordPress Vulnerability Scanner:
- Fork the repository
- Create your feature branch (
git checkout -b feature/improvement
) - Commit your changes (
git commit -m 'Add new feature'
) - Push to the branch (
git push origin feature/improvement
) - Open a Pull Request
Before contributing, please read our Security Guidelines.
📜 License
MIT © 2025 Omer Latif - See LICENSE for details.
Need Help?
Open an issue on our GitHub repository or contact [email protected]