wpdive — Vulnerabilities & Security Advisories 10

Wpdive is a WordPress security scanner designed to detect vulnerabilities in WordPress websites and plugins. Historically, it has been associated with multiple security issues, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. The tool has recorded 9 CVEs, with several critical flaws allowing unauthorized access or code execution. Notable characteristics include its aggressive scanning approach, which has sometimes led to false positives, and past incidents where the tool itself was compromised, resulting in malicious versions being distributed. Despite these issues, wpdive remains used for WordPress vulnerability assessment, though users should verify tool integrity before deployment.