WPScan
Open source
Free
Free forever
Overview
WPScan is a security tool for auditing WordPress installations by identifying vulnerable plugins themes weak passwords exposed files and misconfigurations using a large vulnerability database.
Key features
- Plugin vulnerability scan
- Theme detection
- User enumeration
- Password auditing
- WordPress security database