rastating/wordpress-exploit-framework

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

1046 stars · 261 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Ruby framework for penetration testing WordPress installations, providing a console with loadable exploit and payload modules. It is distributed as the wpxf gem and works similarly to Metasploit for WordPress-specific vulnerabilities.

Use cases

• test wordpress site for known vulnerabilities
• run exploit modules against a wordpress target
• audit wordpress plugins for security issues
• penetration testing of wordpress systems
• search and load wordpress exploit modules from a console

When to choose

• you need a dedicated, modular tool for testing WordPress-specific exploits
• you prefer a lightweight Ruby alternative to Metasploit for WordPress targets
• you want a console-driven workflow with search, use, set, and run commands

When to avoid

• you need general-purpose penetration testing beyond WordPress
• you need actively maintained exploit modules - the latest release dates to 2019
• you are not comfortable working with Ruby dependencies like Nokogiri

Facets

framework · maturity maintenance

penetration-testing security cli security penetration-testing web-development developer-tools windows ruby cli wordpress exploit-framework wpxf security-audit metasploit-like ruby-gem exploitation linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="rastating/wordpress-exploit-framework")