With our very own WordPress vulnerability database, WPScan is the leading software for WordPress security scanning.

Global
Joined July 2012
WPScan - WordPress Security retweeted
We’re excited to announce new ways we’ve incorporated WPScan into our WordPress VIP Codebase Manager, improving our security posture. Read more here: bit.ly/3YhTFSW
1
1
1
6
WPScan - WordPress Security retweeted
There is only 1 week left for you to apply to join the #WCEU volunteers team. Come and help 2,000 other #WordPress enthusiasts enjoy the best WordCamp Europe yet! See you in #Porto? europe.wordcamp.org/2022/cal… #WCEU2022
1
7
1
11
WPScan - WordPress Security retweeted
Stoked to announce the facelift of WPScan.com has launched. WPScan joined the @automattic fam last year. It helps discover WordPress core, theme & plugin vulnerabilities. I had the opportunity to be project & design lead for this — working with a very talented team.
5
8
1
56
WPScan - WordPress Security retweeted
Found a WordPress site? Peep the plugins 👀 📢 Find the installed plugins with WPScan 📢 Set up your own WP instance and install the same plugins 📢 Hack your own instance 📢 Report your bugs! The most common bug you'll find with this method is XSS👌 #bugbountytips
5
22
1
93
WPScan - WordPress Security retweeted
The WPScan vulnerability database itself is of immense value. As of today, it has more than 20,000 entries, all vetted and added through an expert team. Check our blog post and see how to use this database for improved #WordPress security. bit.ly/3Ctl8pd
WPScan - WordPress Security retweeted
WordPress 5.8.2 Stored XSS Our new blog post details a tricky code vulnerability in the WordPress core which remained unpatched for more than 3 years and affected the wordpress.org website. Learn more: blog.sonarsource.com/wordpre… #appsec #security #vulnerability
WPScan - WordPress Security retweeted
Tired: Die Hard is a Christmas movie. Wired: Home Alone is a hacker/blue-team movie.
8
48
8
270
WPScan - WordPress Security retweeted
If you use Paid Memberships Pro, update to the latest version. It contains a security fix implemented a few days ago. "SECURITY: Updated escaping on the discount codes page in the dashboard to prevent XSS attacks. #1867 (Thanks, Erwan from WPScan)" wordpress.org/plugins/paid-m…
WPScan - WordPress Security retweeted
dradis-wpscan (4.1.0): This add-on allows you to upload and parse output produced from the WPScan WordPress security scanne rubygems.org/gems/dradis-wps…
WPScan - WordPress Security retweeted
The WPScan vulnerability database has been around since 2014 and is updated on a daily basis by dedicated #WordPress security specialists and the community at large. Learn how to use this database to improve the #security of your site. bit.ly/3Ctl8pd
WPScan - WordPress Security retweeted
better late then never. this was an acquisition that should have happened years ago @_WPScan_ was the made to be a perfect fit with @WordPress , super proud of @ethicalhack3r and team. Hoping to see more inbuild security setup’s on wordpress.
WPScan - WordPress Security retweeted
Jetpack is acquiring WPScan, a WordPress vulnerability database used across the WordPress ecosystem to learn about new vulnerabilities. Read more about how we're planning to make malware data and APIs more open source for all. jetpack.com/2021/11/04/jetpa…
4
14
4
29
WPScan - WordPress Security retweeted
An interview with @_WPScan_ founder, Ryan Dewhurst. During this interview @ethicalhack3r talks about the future of #WordPress #security and secure coding in plugins & themes and much more. Check it out! bit.ly/38ig0YK
WPScan - WordPress Security retweeted
Sometimes, enumeration is all you need🥳 Bug type: CSRF on wordpress plugin. Scanned target with @_WPScan_ Got to know that they are using older version of one wordpress plugin, Found it to be vulnerable to CSRF, searched for exploit, got working🙌 #bugbounty #bugbountytips
6
10
1
78
WPScan - WordPress Security retweeted
As people are recieving swag about now ish I just wanna say thanks to our sponsors without whom we wouldn't have the swag to send out, cheers to you. @QuorumCyber @exabeam @jumping_uk @security_bore @IsGovern @ReuniVous @_WPScan_ @perfectimage @PenTestPartners We love you all ❤️
6
1
14
WPScan - WordPress Security retweeted
Good news! The first plans for WCEU 2022 have been rolled out! And to make our plans succeed we need more hands! So we have reopened our Call for Organisers again. Apply now and help us to bring you back all the hugs and warm feelings! europe.wordcamp.org/2022/por… #WCEU #WCEU2022
WPScan - WordPress Security retweeted
During a security assessment on a WordPress website, @acervoise found a XSS vulnerability in the CookieBot plugin. Funny detail: the vulnerability was not directly in the plugin but in an included script hosted on CookieBot website! synacktiv.com/sites/default/…
4
2
30