WPscan

The version of WordPress installed and any associated vulnerabilities
What plugins are installed and any associated vulnerabilities
What themes are installed and any associated vulnerabilities
Username enumeration
Users with weak passwords via password brute forcing
Backed up and publicly accessible wp-config.php files
Database dumps that may be publicly accessible
If error logs are exposed by plugins
Media file enumeration
Vulnerable Timthumb files
If the WordPress readme file is present
If WP-Cron is enabled
If user registration is enabled
Full Path Disclose
Upload directory listing https://github.com/wpscanteam/wpscan/wiki/WPScan-User-Documentation