According to WordPress, their framework powers 31% of all sites. The open-source CMS-for-everything is a titan, providing the basic engine for hobbyist and commercial sites alike, from everything to your uncle's blog to the White House landing page. As such, it's an incredibly large target for pentesters and hackers everywhere. WordPress, with its myriad of plugins and configuration options, provides a large attack surface that, often managed by administrators with little technical experience, can be tricky to secure. Every shoddily-coded plugins, monkey-patched pieces of WP core, or ancient installations can be the foothold necessary for an attacker to deface or compromise a WP site.
WPScan functionality comes packaged in a few different tools. For our purposes, the most important are the containerized Docker command-line interface and...