URL: https://www.collegeave.com/ [2606:4700::6812:6a61]
Started: Wed Aug  6 08:13:35 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - rt-fastcgi-cache: HIT
 |  - permissions-policy: accelerometer=(self)
 |  - referrer-policy: same-origin
 |  - cf-cache-status: DYNAMIC
 |  - Server: cloudflare
 |  - CF-RAY: 96af7a939e0378d8-LAX
 |  - alt-svc: h3=":443"; ma=86400
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://www.collegeave.com/robots.txt
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

WordPress readme found: https://www.collegeave.com/readme.html
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

The external WP-Cron seems to be enabled: https://www.collegeave.com/wp-cron.php
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 60%
 | References:
 |  - https://www.iplocation.net/defend-wordpress-from-ddos
 |  - https://github.com/wpscanteam/wpscan/issues/1299

WordPress version 6.8.1 identified (Outdated, released on 2025-04-30).
 | Found By: Meta Generator (Passive Detection)
 |  - https://www.collegeave.com/, Match: 'WordPress 6.8.1'
 | Confirmed By: Most Common Wp Includes Query Parameter In Homepage (Passive Detection)
 |  - https://www.collegeave.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1

WordPress theme in use: COLLEGE_AVE_2023
 | Location: https://www.collegeave.com/wp-content/themes/COLLEGE_AVE_2023/
 | Readme: https://www.collegeave.com/wp-content/themes/COLLEGE_AVE_2023/README.md
 | Style URL: https://www.collegeave.com/wp-content/themes/COLLEGE_AVE_2023/style.css
 | Style Name: College Ave 2023
 | Author: Braindo
 |
 | Found By: Urls In Homepage (Passive Detection)
 |
 | Version: 0.0.0 (80% confidence)
 | Found By: Style (Passive Detection)
 |  - https://www.collegeave.com/wp-content/themes/COLLEGE_AVE_2023/style.css, Match: 'Version:            0.0.0'

Enumerating Users (via Passive and Aggressive Methods)

 Brute Forcing Author IDs -: |=================================================|

 No Users Found.

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Wed Aug  6 08:13:50 2025
Requests Done: 59
Cached Requests: 6
Data Sent: 35.947 KB
Data Received: 2.474 MB
Memory used: 226.711 MB
Elapsed time: 00:00:15

Target

www.collegeave.com

Scan method

Enumerate Wordpress Users

Run command

wpscan --url https://www.collegeave.com/ --enumerate u --random-user-agent --force --max-scan-duration 60

Scan time

15s

Quick report

Order full scan ($19/one time)

Scan date

06 Aug 2025 11:13

Copy scan report

Download report

Remove scan result

$