Membership level: Free member
Enumerate Popular plugins (wpscan --url https://www.studiolegalealbanifabbri.it/ --enumerate p --random-user-agent --force --max-scan-duration 60)
URL: https://www.studiolegalealbanifabbri.it/ [89.46.107.224]
Started: Tue Dec  2 16:12:24 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - Server: aruba-proxy
 |  - X-ServerName: webx.aruba.it
 |  - X-Aruba-Cache: HIT
 |  - Alt-Svc: h3=":443"; ma=86400
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://www.studiolegalealbanifabbri.it/robots.txt
 | Interesting Entries:
 |  - /wp-admin/
 |  - /wp-admin/admin-ajax.php
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

WordPress readme found: https://www.studiolegalealbanifabbri.it/readme.html
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

The external WP-Cron seems to be enabled: https://www.studiolegalealbanifabbri.it/wp-cron.php
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 60%
 | References:
 |  - https://www.iplocation.net/defend-wordpress-from-ddos
 |  - https://github.com/wpscanteam/wpscan/issues/1299

WordPress version 6.9 identified (Unknown, released on Unknown).
 | Found By: Rss Generator (Passive Detection)
 |  - https://www.studiolegalealbanifabbri.it/feed/, <generator>https://wordpress.org/?v=6.9</generator>
 |  - https://www.studiolegalealbanifabbri.it/comments/feed/, <generator>https://wordpress.org/?v=6.9</generator>

WordPress theme in use: astra
 | Location: https://www.studiolegalealbanifabbri.it/wp-content/themes/astra/
 | Last Updated: 2025-11-11T00:00:00.000Z
 | Readme: https://www.studiolegalealbanifabbri.it/wp-content/themes/astra/readme.txt
 |  The version is out of date, the latest version is 4.11.15
 | Style URL: https://www.studiolegalealbanifabbri.it/wp-content/themes/astra/style.css
 | Style Name: Astra
 | Style URI: https://wpastra.com/
 | Description: The Astra WordPress theme is lightning-fast and highly customizable. It has over 1 million downloads...
 | Author: Brainstorm Force
 | Author URI: https://wpastra.com/about/?utm_source=theme_preview&utm_medium=author_link&utm_campaign=astra_theme
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 4.11.2 (80% confidence)
 | Found By: Style (Passive Detection)
 |  - https://www.studiolegalealbanifabbri.it/wp-content/themes/astra/style.css, Match: 'Version: 4.11.2'

Enumerating Most Popular Plugins (via Passive Methods)
Checking Plugin Versions (via Passive and Aggressive Methods)

 Plugin(s) Identified:

*
 | Location: https://www.studiolegalealbanifabbri.it/wp-content/plugins/*/
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | The version could not be determined.

connect-polylang-elementor
 | Location: https://www.studiolegalealbanifabbri.it/wp-content/plugins/connect-polylang-elementor/
 | Last Updated: 2025-10-17T15:53:00.000Z
 |  The version is out of date, the latest version is 2.5.3
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 2.4.6 (100% confidence)
 | Found By: Readme - Stable Tag (Aggressive Detection)
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/connect-polylang-elementor/README.txt
 | Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/connect-polylang-elementor/README.txt

elementor
 | Location: https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor/
 | Last Updated: 2025-11-23T13:13:00.000Z
 |  The version is out of date, the latest version is 3.33.2
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 3.29.2 (100% confidence)
 | Found By: Query Parameter (Passive Detection)
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.29.2
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.29.2
 | Confirmed By:
 |  Readme - Stable Tag (Aggressive Detection)
 |   - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor/readme.txt
 |  Readme - ChangeLog Section (Aggressive Detection)
 |   - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor/readme.txt

elementor-pro
 | Location: https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor-pro/
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 3.29.2 (90% confidence)
 | Found By: Query Parameter (Passive Detection)
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.29.2
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.29.2
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.29.2
 | Confirmed By: Change Log (Aggressive Detection)
 |  - https://www.studiolegalealbanifabbri.it/wp-content/plugins/elementor-pro/changelog.txt, Match: '#### 3.29.2 -'

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Tue Dec  2 16:12:45 2025
Requests Done: 48
Cached Requests: 7
Data Sent: 16.855 KB
Data Received: 796.162 KB
Memory used: 276.664 MB
Elapsed time: 00:00:21
Color Scheme
Target
www.studiolegalealbanifabbri.it
Scan method
Enumerate Popular plugins
Run command
wpscan --url https://www.studiolegalealbanifabbri.it/ --enumerate p --random-user-agent --force --max-scan-duration 60
Scan time
21s
Quick report
Order full scan ($19/one time)
Scan date
02 Dec 2025 19:12
Copy scan report
Download report
Remove scan result
$
Total scans
About 3 times
Some firewalls blocks vulnerability scanners. For get true positive results add wpscan.online IP addresses (208.76.253.232-208.76.253.239 or CIDR 208.76.253.232/29 ) to the whitelist
[scan_method]
Visibility:
Scan method:
Max Scan duration: