0

I have just made a WordPress plugin and I would like to scan it for OWASP Top 10 vulnerabilities, any resources on how to get started here?

Thanks

Improve this question

2 Answers 2

Reset to default
1

Try https://hackertarget.com/vulnerability-scanner/ it has many other testing tools as well, some are free and others paid.

Improve this answer
1

Check out WPScan. It's normally used as a command line scan tool but there's also a wordpress plugin, which can make your life easier. They have a series of automated scripts that search your website for vulnerabilities and warn you if it finds any. I just don't know how well does it work on plugins, but it's great for overall site vulnerabilities.

It's based on the WPScan Wordpress Vulnerability Database.

Improve this answer
1
  • Does it actually scan? It sounds like it just compares component versions against a known-compromised database.
    – Rup
    Nov 10, 2020 at 12:18

Not the answer you're looking for? Browse other questions tagged or ask your own question.