Blog

  • Hack the Planet

    WPScan started as a simple Ruby script in 2011 to help identify vulnerabilities in self-hosted WordPress websites. The simple script matured into a large software project and gained popularity amongst the security and WordPress communities. For many years we did not think of WPScan as a business, but since last year we decided that to…

  • WPScan Brute Force

    Password brute forcing is a common attack that hackers have used in the past against WordPress sites at scale. In 2017 Wordfence documented a huge password brute force attack, which saw 14.1 million attacks per hour at its peak. Attackers are looking for users, preferably administrators, with weak passwords to be able to login to WordPress…

  • Lots of WPScan CLI Changes

    Well, in fact, there is just one change, but it’s a big one. Recently we released some big changes to WPVulnDB, which we recently blogged about. Now, we want to tell you about a big change that we are going to be making to the WPScan CLI tool in version 3.7.0, which will be released sometime within the next…