Search the Community

WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. Changelog v3.7.3 Fixed Incorrect parsing of theme data when new lines before/after comments were stripped from the CSS file – Ref #1404 Improved passive detection of WordPress Default wp-content location is now checked regardless of the detection mode choose, if the directory could not be detected passively Fixed empty username returned in some cases when detected via Author ID brute forcing. Fixed an issue where some plugins/themes were not detected when using he --scope option Fixed incorrect detection of the wp-content folder in some cases – Ref #1411 [HIDE][Hidden Content]]