# Wordpress Enumeration

- [Extra commands](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/extra-commands.md)
- [WPScan one-liners](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/wpscan-one-liners.md)
- [Plugins & Themes exploitation](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation.md): Different techniques to attack vulnerable plugins in Wordpress
- [AdRotate](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/adrotate.md)
- [Tsumugi 404.php](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/tsumugi-404.php.md): Authenticated exploit
- [Twentytwenty (Theme)](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/twentytwenty-theme.md)
- [Woody AD Snippets](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/woody-ad-snippets.md): Need creds and access to admin dashboard
- [Activity monitor 2](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/activity-monitor-2.md): Exploit available
- [wp.spritz](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/wp.spritz.md)
- [Social Warfare](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/social-warfare.md): Read /etc/passwd
- [Mail Masta 1.0](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/mail-masta-1.0.md)
- [Twentyfourteen](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/twentyfourteen.md): Different versions will have different nomenclatures (twentythirteen, twentyfifthteen...etc)
- [CVE-2020-35489 Contact Form 7](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/cve-2020-35489-contact-form-7.md)
- [one-liners](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/one-liners.md)
- [CVE-2023-23488](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/cve-2023-23488.md): Unauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)
- [nmap](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/nmap.md)
- [Common directories](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/common-directories.md)
- [MoveStore API Auth bypass](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/movestore-api-auth-bypass.md)
