Simple WPScan commands

info.text

Get your API token from wpvulndb.com if you also want the vulnerabilities associated with the detected plugin displaying.

For all plugins with known vulnerabilities:

wpscan --url example.com -e vp --plugins-detection mixed --api-token YOUR_TOKEN

For all plugins in our database (could take a very long time):

wpscan --url example.com -e ap --plugins-detection mixed --api-token YOUR_TOKEN

To bypass some simple WAFs use the "--random-user-agent" option.

That's not work for me

Try again, we had some issues with the API this morning.

And update your version of WPScan.