https://blog.wpsec.com/wpscan/
How to scan your WordPress instances for Security Issues using WPScan