WPScan

Purpose

Use this skill when the confirmed target is WordPress and the methodology calls for CMS-specific review.

Phase Fit

• Primary: Vulnerability Analysis
• Secondary: Discovery and Reconnaissance, Retest and Closure

Use When

• Need to confirm WordPress version, plugins, or themes.
• Need WordPress-specific exposure review instead of generic web checks alone.
• Need a focused retest after WordPress hardening changes.

Avoid When