WordPress attacks TL;DR: Plugin universe is the bug surface. wpscan + user enum + theme/plugin CVEs + xmlrpc.pingback abuse. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References https://wpscan.com/