Check if the WordPress page you are auditing has the typical vulnerable configuration errors, and can even list system users.
git clone https://github.com/micro-joan/wp-config-scan
chmod +x wp-config-scan.sh
./wp-config-scan.sh https://wordpress_site.com
