The WPScan security scanner was developed primarily for WordPress administrators and security teams to evaluate the current state of their respective WordPress installations’ level of protection against potential threats. It checks WordPress websites for known security flaws in the application framework, plugins, themes, and other known misconfigurations.