WPScan: a free, black box WordPress vulnerability CLI scanner
wpscan.org