Build software better, together

ikow / php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

exploit poc rce php-security wordpress-security detection-rules vulnerability-research suricata-rules waf-rules php-exploit session-upload-progress cve-2026-109618 cve-2026-109619 php2shell

Updated Oct 22, 2026
Python

uphiago / recon-skills

Star

Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

penetration-testing bug-bounty wordpress-security offensive-security red-team ssrf security-automation reconnaissance cloud-security subdomain-enumeration supabase firebase-hacking jwt-attacks hermes-agent cors-exploitation

Updated Sep 1, 2026
Python

olacabs / jackhammer

Star

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

security static-code-analysis penetration-testing dynamic-analysis application-security wordpress-security mobile-security vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment network-security webappsec vulnerability-scanning source-code-analysis penetration-testing-framework security-vulnerability-assessment

Updated Mar 18, 2024
Java

swisskyrepo / Wordpresscan

Sponsor

Star

WPScan rewritten in Python + some WPSeku ideas

python wordpress wordpress-plugin wordpress-theme vulnerabilities wordpress-security wordpress-scanner wpscan hacktoberfest vulnerability-scanners

Updated Jun 4, 2021
Python

szepeviktor / waf4wordpress

Sponsor

Star

WAF for WordPress 🔥 with 60+ security checks and weekly updates

plugin wordpress security firewall waf wordpress-security fail2ban

Updated Apr 16, 2026
PHP

onhexgroup / Vulnerable-WordPress

Star

The vulnerable version of WordPress that is updated monthly.

wordpress cybersecurity wordpress-security

Updated Jan 14, 2025

armourinfosec / Secure-WordPress-Administration

Star

Open-source, lab-driven study notes for building, administering, hardening, and operating WordPress at scale — 28 modules across install, content, security, performance, and DevOps (CC BY 4.0).

wordpress wp-cli devops sysadmin self-hosted woocommerce wordpress-security security-hardening performance-optimization headless-wordpress wordpress-hardening wordpress-administration

Updated Jul 24, 2026

gobuildwp / wordpress-mcp-ai-gobuildwp

Star

GoBuildWP (formerly WPPilot): WordPress MCP server & AI agent for ChatGPT, Claude, Cursor, Codex. Build and edit full websites in Elementor and Gutenberg, run SEO, PageSpeed checks, safe updates, backups and security, many sites via GoBuildWP Cloud. Safety profiles, human approval, undo. Free core; Pro adds WooCommerce and more builders.

Updated Oct 25, 2026
PHP

miladrezanezhad / web-security-scanner-pro

Star

Advanced web security scanner with 49 modules, evasion engine, and CVE database.

python open-source penetration-testing sql-injection web-security wordpress-security xss-detection vulnerability-scanners security-scanner security-tools waf-bypass cve-scanner

Updated Oct 16, 2026
Python

wpultimatesecurity / WordPress-Security-Skills

Star

AI coding agent skills for shipping, maintaining secure WordPress Sites

php wordpress security wordpress-security ai-agents coding-agents agent-skills claude-code

Updated Sep 29, 2026
PHP

fernandotellado / ai-skills

Star

AI SKILL.md files

wordpress wordpress-plugin security performance wordpress-development skills wordpress-theme seo-optimization wordpress-security ai-agents wordpress-performance plugin-development content-creation llm-agent

Updated Oct 4, 2026
PHP

umutphp / wp-vulnerability-check

Sponsor

Star

A command line took to check the WPScan Vulnerability Database via API to identify the security issues of WordPress plugins installed.

wordpress wordpress-plugin security continuous-integration wordpress-security hacktoberfest wordpress-security-scanner vulnerability-checker

Updated Oct 22, 2023
PHP

dknauss / Sudo

Sponsor

Star

Concluded research prototype — do not install. Final finding: github.com/dknauss/Sudo/blob/main/docs/finding.md

sudo wordpress-security access-control zero-trust wordpress-auth research-archive wordpress-users principle-of-least-privilege

Updated Oct 19, 2026
PHP

pluginkollektiv / antivirus

Star

Useful plugin that will scan your theme templates for malicious injections. Automatically. Every day. For more blog security.

wordpress wordpress-plugin antivirus wordpress-security hacktoberfest

Updated Oct 18, 2026
PHP

ihuzaifashoukat / wpaudit

Star

WPAUDIT: Advanced WordPress security auditing suite & vulnerability scanner. Automates pentesting with Nmap, WPScan, Nuclei, SQLMap. Comprehensive reports. Ideal for ethical hackers & Kali Linux.

Updated May 27, 2025
Python

chrispetrou / FastAudit

Star

A wordpress security auditor! Audit your wordpress application for security issues with even 1 request.

wordpress security auditing shodan tool enumeration pentesting hardening vulnerabilities wordpress-security password-checker username-checker wpscan-vulnerability-database wordpress-security-scanner

Updated Jan 13, 2026
Python

adityaarsharma / wordpress-malware-removal

Star

Audit, clean, and harden a WordPress site end to end, with an AI agent (Claude/Cursor/Codex/MCP or SSH). Detects & removes hidden malware — cloaking, backdoors, database injection — scores your security posture, and hardens safely. Free, open-source (AGPL-3.0).

Updated Oct 10, 2026
Python

jurerotar / Wordpress-security-and-performance

Star

Apache configuration and useful functions for more secure and performant Wordpress sites.

php wordpress security wordpress-development apache wp htaccess wordpress-security

Updated Mar 11, 2025
PHP

password123456 / setup-wordpress-with-security-best-practice

Sponsor

Star

wordpress security best practice

wordpress wordpress-development wordpress-security wordpress-site wordpress-setup wordpress-settings wordpress-guide wordpress-hardening wordpress-best-practice hardening-wordpress securing-wordpress

Updated Jun 5, 2024

centminmod / centminmod-fail2ban

Sponsor

Star

fail2ban setup for centminmod.com LEMP stack with CSF Firewall

nginx wordpress centos csf cloudflare centminmod wordpress-security fail2ban fail2ban-filter bots-protection nginx-fail2ban

Updated Apr 8, 2023
Shell

Navigation Menu

wordpress-security

Here are 279 public repositories matching this topic...

ikow / php2shell-poc

uphiago / recon-skills

olacabs / jackhammer

swisskyrepo / Wordpresscan

szepeviktor / waf4wordpress

onhexgroup / Vulnerable-WordPress

armourinfosec / Secure-WordPress-Administration

gobuildwp / wordpress-mcp-ai-gobuildwp

miladrezanezhad / web-security-scanner-pro

wpultimatesecurity / WordPress-Security-Skills

fernandotellado / ai-skills

umutphp / wp-vulnerability-check

dknauss / Sudo

pluginkollektiv / antivirus

ihuzaifashoukat / wpaudit

chrispetrou / FastAudit

adityaarsharma / wordpress-malware-removal

jurerotar / Wordpress-security-and-performance

password123456 / setup-wordpress-with-security-best-practice

centminmod / centminmod-fail2ban

Add this topic to your repo