WordPress Plugin Hunt Skill

Discover installed WordPress plugins through REST API namespace probing, readme.txt version detection, and HTML/JS source analysis. Cross-reference discovered versions against known CVEs for exploitation. WordPress plugin vulnerabilities are one of the most reliable paths to RCE — confirmed CVEs include Elementor, Slider Revolution, ElementsKit, Gravity Forms, Jetpack, WooCommerce, and LiteSpeed Cache.

When to Use

• WordPress confirmed on target (via wp-mass-recon).
• Running deep-invade Phase 3.
• You need an exploitation vector beyond CORS/XMLRPC.
• Target has a plugin-heavy WordPress site (e-commerce, page builder, forms).

Prerequisites

• terminal with curl, python3.
• WordPress target confirmed (/wp-json/ or /wp-login.php accessible).
• For CVE exploitation: knowledge of specific CVE PoCs (reference security-arsenal skill).

How to Run