Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

WPScan rewritten in Python + some WPSeku ideas

WAF for WordPress 🔥 with 60+ security checks and weekly updates

The vulnerable version of WordPress that is updated monthly.

Advanced web security scanner with 49 modules, evasion engine, and CVE database.

Professional Agent Skill for building, auditing, testing, and releasing modern WordPress plugins with Codex, Cursor, and Claude Code.

Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

Useful plugin that will scan your theme templates for malicious injections. Automatically. Every day. For more blog security.

A command line took to check the WPScan Vulnerability Database via API to identify the security issues of WordPress plugins installed.

A wordpress security auditor! Audit your wordpress application for security issues with even 1 request.

WPAUDIT: Advanced WordPress security auditing suite & vulnerability scanner. Automates pentesting with Nmap, WPScan, Nuclei, SQLMap. Comprehensive reports. Ideal for ethical hackers & Kali Linux.

Apache configuration and useful functions for more secure and performant Wordpress sites.

AI SKILL.md files

wordpress security best practice

fail2ban setup for centminmod.com LEMP stack with CSF Firewall

Prevents users from being logged into the same WordPress site from multiple places.

Advanced use of WPScan (WordPress Security Scanner) with other tools like nmap, nikto, owasp-zap, ids for ethnical Hackers

Require certain users to change their passwords on a regular basis.

Simple Bash Script For Collecting Wordpress Username

DeConfigro is a tool that scans WordPress websites for the WordPress Setup Config Vulnerability. If exposed, this page indicates an incomplete installation and can be exploited, posing a security risk.