I Built an Open-Source WordPress Security Scanner — 109 Checks in 60 Seconds

说明与用途

wpsec109 是一款开源的 WordPress 安全扫描工具，能在约 60 秒内完成 109 项检查，发现关键漏洞并给出可操作的修复建议。

问题

WordPress sites often have basic security misconfigurations that are rarely audited, such as PHP execution in uploads, exposed config files, missing headers, and weak permissions.

结果

The scanner identified 4 failures out of 109 checks, including PHP execution in uploads and exposed backup files, and provided clear remediation steps.

工作流

• Clone the repository from GitHub
• Navigate to the project directory
• Run the scanner with python wordpress_security_check.py --target https://example.com
• Optionally add --wpscan-api-key YOUR_KEY for CVE cross‑reference
• Save a JSON report with --save report.json
• Review the console or JSON output for critical, high, medium, and low findings and apply the suggested fixes

证据

wpsec109 — a free, open-source scanner that checks 109 WordPress security hardening points across 22 categories in about 60 seconds.

来源

Sample Output: 109 checks run | 4 failed | 105 passed

来源