WordPress Penetration Testing

A comprehensive WordPress security assessment template that walks you through enumeration, vulnerability scanning, credential attacks, and exploitation techniques using WPScan, Metasploit, and Burp Suite. You'd reach for this when pentesting WordPress sites, which still power about 35% of the web according to the docs. The skill comes from davila7's template collection that has 27.7K GitHub stars, though it originally forked from zebbern's guide. One thing to note: Snyk flagged it in security audits while Gen Agent and Socket passed it, so review the dependencies yourself before running it in production environments. Assumes you're working in Kali or have the toolkit already installed.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'WordPress Penetration Testing' --agent claude-code

Installs into .claude/skills of the current project.

Files

WordPress Penetration Testing

Purpose

Conduct comprehensive security assessments of WordPress installations including enumeration of users, themes, and plugins, vulnerability scanning, credential attacks, and exploitation techniques. WordPress powers approximately 35% of websites, making it a critical target for security testing.