---
name: wordpress-penetration-testing-468e2d918229
description: This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". It provides comprehensive WordPress security assessment methodologies.
metadata:
  author: zebbern
  version: 4.1.0-fractal
---

# WordPress Penetration Testing

## Purpose

Conduct comprehensive security assessments of WordPress installations including enumeration of users, themes, and plugins, vulnerability scanning, credential attacks, and exploitation techniques. WordPress powers approximately 35% of websites, making it a critical target for security testing.

## Prerequisites

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Required Tools](./sub-skills/required-tools.md)
### 2. [Required Knowledge](./sub-skills/required-knowledge.md)
### 3. [Phase 1: WordPress Discovery](./sub-skills/phase-1-wordpress-discovery.md)
### 4. [Phase 2: Basic WPScan Enumeration](./sub-skills/phase-2-basic-wpscan-enumeration.md)
### 5. [Phase 3: WordPress Version Detection](./sub-skills/phase-3-wordpress-version-detection.md)
### 6. [Phase 4: Theme Enumeration](./sub-skills/phase-4-theme-enumeration.md)
### 7. [Phase 5: Plugin Enumeration](./sub-skills/phase-5-plugin-enumeration.md)
### 8. [Phase 6: User Enumeration](./sub-skills/phase-6-user-enumeration.md)
### 9. [Phase 7: Comprehensive Enumeration](./sub-skills/phase-7-comprehensive-enumeration.md)
### 10. [Phase 8: Password Attacks](./sub-skills/phase-8-password-attacks.md)
### 11. [Phase 9: Vulnerability Exploitation](./sub-skills/phase-9-vulnerability-exploitation.md)
### 12. [Phase 10: Advanced Techniques](./sub-skills/phase-10-advanced-techniques.md)
### 13. [WPScan Enumeration Flags](./sub-skills/wpscan-enumeration-flags.md)
### 14. [Common WordPress Paths](./sub-skills/common-wordpress-paths.md)
### 15. [WPScan Command Examples](./sub-skills/wpscan-command-examples.md)
### 16. [Legal Considerations](./sub-skills/legal-considerations.md)
### 17. [Technical Limitations](./sub-skills/technical-limitations.md)
### 18. [Detection Evasion](./sub-skills/detection-evasion.md)
### 19. [WPScan Shows No Vulnerabilities](./sub-skills/wpscan-shows-no-vulnerabilities.md)
### 20. [Brute-Force Blocked](./sub-skills/brute-force-blocked.md)
### 21. [Cannot Access Admin Panel](./sub-skills/cannot-access-admin-panel.md)


---
Source attribution: Dokhacgiakhoa
Original project: https://github.com/Dokhacgiakhoa/antigravity-ide/blob/c4a059bbf7a8d6b2162071f0fbfe74053faa6d20/.agent/skills/wordpress-penetration-testing/SKILL.md
License: MIT
License information: https://opensource.org/license/mit
Original upstream instructions; downloaded from Mega AI Hub.

## Upstream license notice

MIT License

Copyright (c) 2026 Dokhacgiakhoa

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

================================================================================
UNIVERSAL ACKNOWLEDGEMENTS & REFERENCES
================================================================================

This project is authored and maintained by Dokhacgiakhoa.
Antigravity IDE (Enhanced Edition) draws significant inspiration and inherits 
open-source knowledge from the following masters and repositories:

1. Antigravity Kit (Core Reference)
   - Original Author: vudovn
   - Link: https://github.com/vudovn/antigravity-kit

2. Antigravity Awesome Skills (Skill Metadata Reference)
   - Original Author: sickn33
   - Link: https://github.com/sickn33/antigravity-awesome-skills

3. UI/UX Pro Max (Design Philosophy Reference)
   - Original Author: sickn33
   - Link: https://github.com/sickn33/ui-ux-pro-max

4. Model Context Protocol (MCP) standards
   - Authors: Anthropic & Ecosystem Contributors
   - Link: https://modelcontextprotocol.io/

5. High-Performance Web Standards
   - Inspiration: Vercel Engineering & Anthony Fu (antfu)

6. Strategic Knowledge Extraction
   - Inspiration: Fabric Patterns (danielmiessler)

*Note: All trademarks and copyrights belong to their respective owners. 
The references above reflect research-level inspiration and antecedent 
contributions. These parties are not involved in the management of this repository.*



# Mega AI Hub resource metadata

Creator / publisher: Dokhacgiakhoa
Original project: https://github.com/Dokhacgiakhoa/antigravity-ide/blob/c4a059bbf7a8d6b2162071f0fbfe74053faa6d20/.agent/skills/wordpress-penetration-testing/SKILL.md
Attribution basis: Source repository record

Fields of work: Development & Engineering
Roles: Backend Developer, DevOps / SRE, Security Engineer
Specialties: Backend
Tools: Wpscan
Country applicability: Country not specified
Classification basis: Source catalog labels
Instruction SHA-256: 62747f9e3fb3ccff5536b1bfefe47933bd7023c86111b9165bc539b489b6f0c3