TOOL TUTORIAL · WordPress Security Assessment

How to install and use WPScan

WPScan is a WordPress security scanner that allows you to scan WordPress installations for vulnerabilities. It is specifically designed to detect security issues within WordPress core, themes, and plugins. WPScan helps security professionals and site administrators identify pote…

Quick install: sudo apt install wpscan

Installation steps

1. Open a terminal on Kali or Debian
2. Run sudo apt install wpscan
3. Register free at wpscan.com to get an API token
4. Run wpscan --version to confirm it works
5. Add your token with the --api-token option when scanning

See the full WPScan reference →