WPScan

Spec sheet

Purpose

WPScan provides a WordPress security scanner and vulnerability database covering WordPress core, plugins, and themes.Read 4 Oct 2026 · wpscan.com

API

The WPScan API provides vulnerability data for WordPress core, plugins, and themes and is used by its scanner and WordPress security plugin.Read 4 Oct 2026 · wpscan.com

Integrations

WPScan lists Slack and HTTP webhooks for enterprise users and names Kali Linux, Dradis, BackBox Linux, Pentoo, Samurai WTF, and BlackArch as integrations.Read 4 Oct 2026 · wpscan.com

Privacy

WPScan says its API stores the scanner IP or domain, WordPress version, plugin and theme slugs, request count, and timestamps.Read 4 Oct 2026 · wpscan.com

Maker

WPScan's enterprise terms identify Automattic Inc. as the provider of the enterprise solution.Read 4 Oct 2026 · wpscan.com

CLI scanning

The free black-box CLI scanner checks WordPress version, installed plugins and themes, and other exposures including username enumeration and publicly accessible configuration files.Read 4 Oct 2026 · wpscan.com

Data use limits

The API terms prohibit permanent storage and caching of vulnerability data, and companies integrating WPScan data into their own services must use an Enterprise account.Read 4 Oct 2026 · wpscan.com

Enterprise API data

Enterprise API results include vulnerability descriptions, proof-of-concept fields, and CVSS risk scores.Read 4 Oct 2026 · wpscan.com

Scanning scope

WPScan says it identifies sites with software containing known vulnerabilities but does not determine whether a site has been compromised or remove malware.Read 4 Oct 2026 · wpscan.com

Service limits

WPScan states that its API carries no uptime or accuracy guarantee and that it may not record every known vulnerability.Read 4 Oct 2026 · wpscan.com

Supported installation methods

The CLI scanner is distributed as a Ruby gem, Docker image, and Homebrew package for macOS.Read 4 Oct 2026 · wpscan.com

Vulnerability review

WPScan says vulnerabilities are manually checked by WordPress security professionals to reduce false positives.Read 4 Oct 2026 · wpscan.com

Plans and prices

Every WPScan plan and price →

Where Specifiction places it

• Vulnerability Scanning Software#21 of 357.3