VULNERABILITY ANALYSIS OF WORDPRESS-BASED WEB APPLICATIONS USING WPSCAN

According to the growth of the Internet, the number of web applications, users and inexperienced developers, the problem of web application security remains relevant at all levels and requires a comprehensive approach. In this article the powerful web service scanning tool Wpscan is investigated. Examples of real vulnerabilities in the WordPress plugins and themes were considered. The plugins and themes are especially important for large web resources using many external modules. These examples show how important regular security updates and monitoring are to prevent threats. In this work, the site Sprut.ru was investigated for safety. Recommendations have also been developed to improve the security of the site. In particular, it is necessary to update the kernel version, remove or hide the file in the root directory, and regularly check the web resource for exploits.