CIP Cyber

Plecost: WordPress Vulnerabilities Finder

Table of Contents

There are a huge number of WordPress around the world. Most of them
are exposed to be attacked and be converted into a virus, malware or
illegal porn provider, without the knowledge of the blog owner.

This project try to help sysadmins and blog’s owners to make a bit secure their WordPress.

Plecost is a vulnerability fingerprinting and vulnerability finder for WordPress blog engine. 

What’s new?

This Plecost 3 version, add a lot of new features and fixes, like:

  • Fixed a lot of bugs.
  • New engine: without threads or any dependencies, but run more
    faster. We’ll used python 3 asyncio and non-blocking connections. Also
    consume less memory. Incredible, right? 🙂
  • Changed CVE update system and storage: Now Plecost get
    vulnerabilities directly from NIST and create a local SQLite data base
    with filtered information for WordPress and theirs plugins.
  • WordPress vulnerabilities: Now Plecost also manage WordPress Vulnerabilities (not only for the Plugins).
  • Add local vulnerability database are queryable. You can consult the
    vulnerabilities for a concrete wordpress or plugins without, using the
    local database.

Installation

Install Plecost is so easy:

$ python3 -m pip install plecost

Remember that Plecost3 only runs in Python 3.

Quick start

Scan a web site si so simple:

$ plecost http://SITE.com

A bit complex scan: increasing verbosity exporting results in JSON format and XML:

JSON

$ plecost -v http://SITE.com -o results.json

XML

$ plecost -v http://SITE.com -o results.xml

Example :

 Download and read more at:

CIP Cyber Staff

CIP Cyber Staff

CIP Cyber Staff comprises CIP cybersecurity experts committed to delivering comprehensive information on critical infrastructure protection. The content covers diverse topics, equipping professionals to defend organizations and communities in an ever-evolving cyber landscape.

Most popular

Industrial Cybersecurity

Want always be up to date?

Don't miss the latest news

By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.

CIP Training & Certifications

Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings

Related Articles

Improving WordPress Security in 2021

What Is WordPress? WordPress is a PHP-based content management system that may be used in conjunction with MySQL. The best part about WordPress is that

Do Hackers Really use Metasploit? NO!

Undoubtedly, Metasploit is one of the most organized, well-developed tools in the pen-testers toolbox. But, do hackers use it? Some of them, but not the

Recovering A Hacked WordPress Site

WordPress is one of the most popular content management systems. More than ⅓ of websites use it, and it’s easy to see why. WordPress is

Want always be up to date?

Don't miss the latest news

By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.

CIP Training & Certifications

Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings