Build software better, together

uphiago / recon-skills

Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

penetration-testing bug-bounty wordpress-security offensive-security red-team ssrf security-automation reconnaissance cloud-security subdomain-enumeration supabase firebase-hacking jwt-attacks hermes-agent cors-exploitation

Updated Sep 1, 2026
Python

olacabs / jackhammer

Star

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

security static-code-analysis penetration-testing dynamic-analysis application-security wordpress-security mobile-security vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment network-security webappsec vulnerability-scanning source-code-analysis penetration-testing-framework security-vulnerability-assessment

Updated Mar 18, 2024
Java

swisskyrepo / Wordpresscan

Sponsor

Star

WPScan rewritten in Python + some WPSeku ideas

python wordpress wordpress-plugin wordpress-theme vulnerabilities wordpress-security wordpress-scanner wpscan hacktoberfest vulnerability-scanners

Updated Jun 4, 2021
Python

szepeviktor / waf4wordpress

Sponsor

Star

WAF for WordPress 🔥 with 60+ security checks and weekly updates

plugin wordpress security firewall waf wordpress-security fail2ban

Updated Apr 16, 2026
PHP

onhexgroup / Vulnerable-WordPress

Star

The vulnerable version of WordPress that is updated monthly.

wordpress cybersecurity wordpress-security

Updated Jan 14, 2025

armourinfosec / Secure-WordPress-Administration

Star

Open-source, lab-driven study notes for building, administering, hardening, and operating WordPress at scale — 28 modules across install, content, security, performance, and DevOps (CC BY 4.0).

wordpress wp-cli devops sysadmin self-hosted woocommerce wordpress-security security-hardening performance-optimization headless-wordpress wordpress-hardening wordpress-administration

Updated Jul 24, 2026

gobuildwp / wordpress-mcp-ai-gobuildwp

Star

GoBuildWP (formerly WPPilot): WordPress MCP server & AI agent for ChatGPT, Claude, Cursor, Codex. Build and edit full websites in Elementor and Gutenberg, run SEO, PageSpeed checks, safe updates, backups and security, many sites via GoBuildWP Cloud. Safety profiles, human approval, undo. Free core; Pro adds WooCommerce and more builders.

Updated Oct 13, 2026
PHP

miladrezanezhad / web-security-scanner-pro

Star

Advanced web security scanner with 49 modules, evasion engine, and CVE database.

python open-source penetration-testing sql-injection web-security wordpress-security xss-detection vulnerability-scanners security-scanner security-tools waf-bypass cve-scanner

Updated May 29, 2026
Python

wpultimatesecurity / WordPress-Security-Skills

Star

AI coding agent skills for shipping, maintaining secure WordPress Sites

php wordpress security wordpress-security ai-agents coding-agents agent-skills claude-code

Updated Sep 29, 2026
PHP

dknauss / Sudo

Sponsor

Star

Concluded research prototype — do not install. Final finding: github.com/dknauss/Sudo/blob/main/docs/finding.md

sudo wordpress-security access-control zero-trust wordpress-auth research-archive wordpress-users principle-of-least-privilege

Updated Sep 28, 2026
PHP

fernandotellado / ai-skills

Star

AI SKILL.md files

wordpress wordpress-plugin security performance wordpress-development skills wordpress-theme seo-optimization wordpress-security ai-agents wordpress-performance plugin-development content-creation llm-agent

Updated Oct 4, 2026
PHP

pluginkollektiv / antivirus

Star

Useful plugin that will scan your theme templates for malicious injections. Automatically. Every day. For more blog security.

wordpress wordpress-plugin antivirus wordpress-security hacktoberfest

Updated Sep 20, 2026
PHP

umutphp / wp-vulnerability-check

Sponsor

Star

A command line took to check the WPScan Vulnerability Database via API to identify the security issues of WordPress plugins installed.

wordpress wordpress-plugin security continuous-integration wordpress-security hacktoberfest wordpress-security-scanner vulnerability-checker

Updated Oct 22, 2023
PHP

ihuzaifashoukat / wpaudit

Star

WPAUDIT: Advanced WordPress security auditing suite & vulnerability scanner. Automates pentesting with Nmap, WPScan, Nuclei, SQLMap. Comprehensive reports. Ideal for ethical hackers & Kali Linux.

Updated May 27, 2025
Python

chrispetrou / FastAudit

Star

A wordpress security auditor! Audit your wordpress application for security issues with even 1 request.

wordpress security auditing shodan tool enumeration pentesting hardening vulnerabilities wordpress-security password-checker username-checker wpscan-vulnerability-database wordpress-security-scanner

Updated Jan 13, 2026
Python

adityaarsharma / wordpress-malware-removal

Star

Audit, clean, and harden a WordPress site end to end, with an AI agent (Claude/Cursor/Codex/MCP or SSH). Detects & removes hidden malware — cloaking, backdoors, database injection — scores your security posture, and hardens safely. Free, open-source (AGPL-3.0).