URL: https://veloce.at/wp-login.php/ [138.201.34.40] Started: Tue Nov 18 03:11:58 2025 Interesting Finding(s): Headers | Interesting Entry: Server: Apache | Found By: Headers (Passive Detection) | Confidence: 100% WordPress readme found: https://veloce.at/wp-login.php/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% This site seems to be a multisite | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | Reference: http://codex.wordpress.org/Glossary#Multisite The external WP-Cron seems to be enabled: https://veloce.at/wp-login.php/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 WordPress version 5.2.23 identified (Outdated, released on 2025-09-30). | Found By: Most Common Wp Includes Query Parameter In Homepage (Passive Detection) | - https://veloce.at/wp-includes/css/dashicons.min.css?ver=5.2.23 | Confirmed By: | Common Wp Includes Query Parameter In Homepage (Passive Detection) | - https://veloce.at/wp-includes/css/buttons.min.css?ver=5.2.23 | Query Parameter In Install Page (Aggressive Detection) | - https://veloce.at/wp-includes/css/dashicons.min.css?ver=5.2.23 | - https://veloce.at/wp-includes/css/buttons.min.css?ver=5.2.23 | - https://veloce.at/wp-admin/css/forms.min.css?ver=5.2.23 | - https://veloce.at/wp-admin/css/l10n.min.css?ver=5.2.23 The main theme could not be detected. Enumerating Users (via Passive and Aggressive Methods) Brute Forcing Author IDs -: |=================================================| No Users Found. No WPScan API Token given, as a result vulnerability data has not been output. You can get a free API token with 25 daily requests by registering at https://wpscan.com/register Finished: Tue Nov 18 03:12:09 2025 Requests Done: 59 Cached Requests: 8 Data Sent: 16.444 KB Data Received: 130.776 KB Memory used: 145.609 MB Elapsed time: 00:00:10