WordPress Compromise Path Analysis

Use this skill to determine whether verified WordPress primitives actually compose into administrative control or benign code-execution proof. It is a chain gate, not a checklist for forcing escalation after a prerequisite fails.

When to Use

• A plugin vulnerability has exact version and route evidence.
• An approved identity may have an unexpected WordPress capability.
• An upload or configuration write could reach executable handling.
• CORS, XML-RPC, staging, or source exposure may supply a missing prerequisite.

Prerequisites