Membership level: Free member
Enumerate Wordpress Users (wpscan --url https://woop.fun/ --enumerate u --random-user-agent --force --max-scan-duration 60)
URL: https://woop.fun/ [212.44.102.58]
Started: Thu Mar  5 07:26:10 2026

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - server: LiteSpeed
 |  - alt-svc: h3=":3443"; ma=2592000, h3-29=":3443"; ma=2592000, h3-Q050=":3443"; ma=2592000, h3-Q046=":3443"; ma=2592000, h3-Q043=":3443"; ma=2592000, quic=":3443"; ma=2592000; v="43,46"
 |  - x-turbo-charged-by: LiteSpeed
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://woop.fun/robots.txt
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

WordPress readme found: https://woop.fun/readme.html
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

Debug Log found: https://woop.fun/wp-content/debug.log
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%
 | Reference: https://codex.wordpress.org/Debugging_in_WordPress

The external WP-Cron seems to be enabled: https://woop.fun/wp-cron.php
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 60%
 | References:
 |  - https://www.iplocation.net/defend-wordpress-from-ddos
 |  - https://github.com/wpscanteam/wpscan/issues/1299

WordPress version 6.9.1 identified (Latest, released on 2026-02-03).
 | Found By: Rss Generator (Passive Detection)
 |  - https://woop.fun/feed/, <generator>https://wordpress.org/?v=6.9.1</generator>
 |  - https://woop.fun/comments/feed/, <generator>https://wordpress.org/?v=6.9.1</generator>

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Thu Mar  5 07:27:05 2026
Requests Done: 36
Cached Requests: 7
Data Sent: 9.686 KB
Data Received: 842.698 KB
Memory used: 169.238 MB
Elapsed time: 00:00:55

Scan Aborted: Max Scan Duration Reached
Color Scheme
Target
woop.fun
Scan method
Enumerate Wordpress Users
Run command
wpscan --url https://woop.fun/ --enumerate u --random-user-agent --force --max-scan-duration 60
Scan time
55s
Quick report
Order full scan ($19/one time)
Scan date
05 Mar 2026 10:27
Copy scan report
Download report
Remove scan result
$
Total scans
About 2 times
Some firewalls blocks vulnerability scanners. For get true positive results add wpscan.online IP addresses (208.76.253.232-208.76.253.239 or CIDR 208.76.253.232/29 ) to the whitelist
[scan_method]
Visibility:
Scan method:
Max Scan duration: