WPScan is a black box WordPress vulnerability scanner.