WPSCAN

WPScan

code

wpscan --url http://10.10.49.137:80/ --no-update -e ap,vt,tt,cb,dbe,u,m --plugins-detection 
aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1

WPScan & SSL

code

wpscan --url $URL --disable-tls-checks --enumerate p --enumerate t --enumerate u

WPScan Brute Forcing

code

wpscan --url $URL --disable-tls-checks -U users -P /usr/share/wordlists/rockyou.txt

Aggressive Plugin Detections

code

wpscan --url $URL --enumerate p --plugins-detection aggressive