WordPress Security Helper

Friendly helper tool to extract intesresting information from a WordPress plugin source code

Pre-Work:

This script is based on the previous works of WPBullet, by OWASP.

Setup

Create a python venv

python3 -m venv venv

Activate it

source venv/bin/activate

Install requirements

pip install -r requirements.txt

Usage

python3 wpsechelper.py -h

usage: wpsechelper.py [-h] [-p PATH] [-s SLUG] [-d]

WPSecHelper - Find WordPress plugins security issues faster

options:
  -h, --help            show this help message and exit
  -p PATH, --path PATH  Path to plugin to analyze
  -s SLUG, --slug SLUG  Downloads plugin by slug and triggers analisys
  -d, --delete          Deletes source_codes folder before analyzing new plugin

Output