Over 27% of all websites globally run WordPress. This makes WordPress a very highly targeted piece of software. There are numbers of different aspects to consider when attempting to discover vulnerabilities in WordPress. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack) discusses how to find vulnerabilities in WordPress sites and how to exploit them.

LINKS:
WordPress Security Guide – http://www.wpbeginner.com/wordpress-security/

WordPress Vuln Database – www.wpvulndb.com

WPScan- https://github.com/wpscanteam/wpscan

WPSeku- https://github.com/m4ll0k/WPSek

source