URL: https://hub-cms.teamengland.org/ [141.193.213.11]
Started: Fri Feb 20 02:24:21 2026

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - Content-Security-Policy: default-src 'self' data: 'unsafe-inline' https: blob: wss:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: adservice.google.ie player.vimeo.com fast.wistia.com cdn.jsdelivr.net beacon-v2.helpscout.net google.com *.doubleclick.net securepubads.g.doubleclick.net *.zopim.com *.zdassets.com *.civiccomputing.com code.jquery.com sc-static.net *.teads.tv *.trak.ee *.twimg.com *.facebook.net *.twitter.com *.googleapis.com *.google-analytics.com *.ads-twitter.com *.google.com *.googletagmanager.com *.sobekrepository.org *.googlesyndication.com *.googleadservices.com *.google.co.uk *.gstatic.com maps.googleapis.com *.cloudflare.com unpkg.com *.reciteme.com *.googletagservices.com *.embedsignage.com; style-src 'self' 'unsafe-inline' *.cloudflare.com *.civiccomputing.com code.jquery.com *.zopim.com *.zdassets.com *.google.com *.googleusercontent.com *.googleadservices.com *.google.co.uk fonts.gstatic.com fonts.googleapis.com *.twimg.com *.twitter.com *.googlesyndication.com *.typekit.net *.reciteme.com *.googletagservices.com *.embedsignage.com; img-src 'self' data: 'unsafe-inline' teamengland.org hub.teamenglang.org hub-cms.teamengland.org code.jquery.com ps.w.org *.basemaps.cartocdn.com *.zopim.io google.com *.google.com *.zendesk.com maps.googleapis.com *.zopim.com *.zdassets.com *.civiccomputing.com chart.googleapis.com *.googleusercontent.com *.googleadservices.com *.google.co.uk *.twimg.com *.facebook.com t.co s.w.org *.teads.tv *.twitter.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.embedsignage.com *.cdninstagram.com *.xx.fbcdn.net *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.gravatar.com *.reciteme.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com *.typekit.net api.reciteme.com data:;
 |  - X-Powered-By: WP Engine
 |  - X-Cacheable: SHORT
 |  - X-Cache-Group: normal
 |  - cf-cache-status: DYNAMIC
 |  - Server: cloudflare
 |  - CF-RAY: 9d0d4b1ffe8ec277-LAX
 |  - alt-svc: h3=":443"; ma=86400
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://hub-cms.teamengland.org/robots.txt
 | Interesting Entries:
 |  - /wp-admin/
 |  - /wp-admin/admin-ajax.php
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

This site has 'Must Use Plugins': https://hub-cms.teamengland.org/wp-content/mu-plugins/
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 80%
 | Reference: http://codex.wordpress.org/Must_Use_Plugins

The external WP-Cron seems to be enabled: https://hub-cms.teamengland.org/wp-cron.php
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 60%
 | References:
 |  - https://www.iplocation.net/defend-wordpress-from-ddos
 |  - https://github.com/wpscanteam/wpscan/issues/1299

WordPress version 6.8.3 identified (Outdated, released on 2025-09-30).
 | Found By: Emoji Settings (Passive Detection)
 |  - https://hub-cms.teamengland.org/, Match: 'wp-includes\/js\/wp-emoji-release.min.js?ver=6.8.3'
 | Confirmed By: Most Common Wp Includes Query Parameter In Homepage (Passive Detection)
 |  - https://hub-cms.teamengland.org/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3

WordPress theme in use: hub
 | Location: https://hub-cms.teamengland.org/wp-content/themes/hub/
 | Style URL: https://hub-cms.teamengland.org/wp-content/themes/hub/style.css
 | Style Name: hub
 | Description: A ready to use Carton/Wordpress Theme. Have fun!...
 | Author: Friends That Code
 | Author URI: https://www.friendsthatcode.co.uk
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 1.0 (80% confidence)
 | Found By: Style (Passive Detection)
 |  - https://hub-cms.teamengland.org/wp-content/themes/hub/style.css, Match: 'Version: 1.0'

Enumerating Users (via Passive and Aggressive Methods)

 Brute Forcing Author IDs -: |=================================================|

 User(s) Identified:

Charlie Bennett
 | Found By: Rss Generator (Aggressive Detection)

Tom Harle
 | Found By: Rss Generator (Aggressive Detection)

salad
 | Found By: Rss Generator (Aggressive Detection)

Richard Bates
 | Found By: Rss Generator (Aggressive Detection)

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Fri Feb 20 02:24:34 2026
Requests Done: 54
Cached Requests: 7
Data Sent: 25.735 KB
Data Received: 233.825 KB
Memory used: 181.664 MB
Elapsed time: 00:00:13

Target

hub-cms.teamengland.org

Scan method

Enumerate Wordpress Users

Run command

wpscan --url https://hub-cms.teamengland.org/ --enumerate u --random-user-agent --force --max-scan-duration 60

Scan time

13s

Quick report

Order full scan ($19/one time)

Scan date

20 Feb 2026 05:24

Copy scan report

Download report

Remove scan result

$