Enumerate Popular plugins (wpscan --url https://demo1wp.shoporg.ru/ --enumerate p --random-user-agent --force --max-scan-duration 120)
URL: https://demo1wp.shoporg.ru/ [81.90.182.215]
Started: Wed Jul 2 11:56:30 2025
Interesting Finding(s):
Headers
| Interesting Entries:
| - Server: nginx/1.20.1
| - X-Powered-By: PHP/7.4.33
| Found By: Headers (Passive Detection)
| Confidence: 100%
robots.txt found: https://demo1wp.shoporg.ru/robots.txt
| Interesting Entries:
| - /wp-admin/
| - /wp-admin/admin-ajax.php
| Found By: Robots Txt (Aggressive Detection)
| Confidence: 100%
WordPress readme found: https://demo1wp.shoporg.ru/readme.html
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
This site has 'Must Use Plugins': https://demo1wp.shoporg.ru/wp-content/mu-plugins/
| Found By: Direct Access (Aggressive Detection)
| Confidence: 80%
| Reference: http://codex.wordpress.org/Must_Use_Plugins
Registration is enabled: https://demo1wp.shoporg.ru/wp-login.php?action=register
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
Upload directory has listing enabled: https://demo1wp.shoporg.ru/wp-content/uploads/
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
The external WP-Cron seems to be enabled: https://demo1wp.shoporg.ru/wp-cron.php
| Found By: Direct Access (Aggressive Detection)
| Confidence: 60%
| References:
| - https://www.iplocation.net/defend-wordpress-from-ddos
| - https://github.com/wpscanteam/wpscan/issues/1299
WordPress version 6.8.1 identified (Latest, released on 2025-04-30).
| Found By: Rss Generator (Passive Detection)
| - https://demo1wp.shoporg.ru/feed/, <generator>https://wordpress.org/?v=6.8.1</generator>
| - https://demo1wp.shoporg.ru/comments/feed/, <generator>https://wordpress.org/?v=6.8.1</generator>
WordPress theme in use: orchid-store
| Location: https://demo1wp.shoporg.ru/wp-content/themes/orchid-store/
| Last Updated: 2025-05-18T00:00:00.000Z
| Readme: https://demo1wp.shoporg.ru/wp-content/themes/orchid-store/readme.txt
| The version is out of date, the latest version is 1.5.13
| Style URL: https://demo1wp.shoporg.ru/wp-content/themes/orchid-store/style.css?ver=6.8.1
| Style Name: Orchid Store
| Style URI: https://themebeez.com/themes/orchid-store/
| Description: Orchid Store is a clean, flexible, stylish & dynamic e-commerce WordPress theme. It is totally based...
| Author: themebeez
| Author URI: https://themebeez.com
|
| Found By: Css Style In Homepage (Passive Detection)
| Confirmed By: Css Style In 404 Page (Passive Detection)
|
| Version: 1.3.3 (80% confidence)
| Found By: Style (Passive Detection)
| - https://demo1wp.shoporg.ru/wp-content/themes/orchid-store/style.css?ver=6.8.1, Match: 'Version: 1.3.3'
Enumerating Most Popular Plugins (via Passive Methods)
Checking Plugin Versions (via Passive and Aggressive Methods)
Plugin(s) Identified:
*
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/*/
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| The version could not be determined.
add-to-cart-direct-checkout-for-woocommerce
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/add-to-cart-direct-checkout-for-woocommerce/
| Latest Version: 2.1.73.63
| Last Updated: 2025-07-01T09:42:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| The version could not be determined.
advanced-woo-search
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/advanced-woo-search/
| Last Updated: 2025-06-23T15:40:00.000Z
| The version is out of date, the latest version is 3.37
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 2.42 (100% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/advanced-woo-search/readme.txt
| Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/advanced-woo-search/readme.txt
buy-one-click-woocommerce
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/buy-one-click-woocommerce/
| Latest Version: 2.2.9 (up to date)
| Last Updated: 2024-03-28T17:13:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
|
| Version: 5.7 (80% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/buy-one-click-woocommerce/readme.txt
compare-products-for-woocommerce
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/compare-products-for-woocommerce/
| Latest Version: 2.1.0 (up to date)
| Last Updated: 2021-07-29T10:06:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 2.1.0 (80% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/compare-products-for-woocommerce/readme.txt
contact-form-7
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/contact-form-7/
| Last Updated: 2025-06-26T09:17:00.000Z
| The version is out of date, the latest version is 6.1
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 5.5.3 (90% confidence)
| Found By: Query Parameter (Passive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.3
| Confirmed By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/contact-form-7/readme.txt
jetpack
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/jetpack/
| Last Updated: 2025-07-01T15:42:00.000Z
| The version is out of date, the latest version is 14.8
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 10.3.2 (90% confidence)
| Found By: Query Parameter (Passive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/jetpack/css/jetpack.css?ver=10.3.2
| Confirmed By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/jetpack/readme.txt
mailpoet
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/mailpoet/
| Last Updated: 2025-07-01T14:14:00.000Z
| The version is out of date, the latest version is 5.12.9
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 3.74.2 (80% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/mailpoet/readme.txt
megamenu
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/megamenu/
| Last Updated: 2025-06-16T12:50:00.000Z
| The version is out of date, the latest version is 3.6.1
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 2.9.4 (80% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/megamenu/readme.txt
perfect-woocommerce-brands
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/perfect-woocommerce-brands/
| Last Updated: 2025-06-25T12:26:00.000Z
| The version is out of date, the latest version is 3.5.5
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 2.0.1 (80% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/perfect-woocommerce-brands/readme.txt
saphali-woocommerce-lite
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/saphali-woocommerce-lite/
| Last Updated: 2025-02-23T21:26:00.000Z
| The version is out of date, the latest version is 2.0.1
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By:
| Urls In 404 Page (Passive Detection)
| Meta Tag (Passive Detection)
|
| Version: 1.8.13 (100% confidence)
| Found By: Meta Tag (Passive Detection)
| - https://demo1wp.shoporg.ru/, Match: 'Saphali Lite 1.8.13'
| Confirmed By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/saphali-woocommerce-lite/readme.txt
sassy-social-share
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/sassy-social-share/
| Last Updated: 2025-06-06T08:04:00.000Z
| The version is out of date, the latest version is 3.3.76
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 3.3.37 (100% confidence)
| Found By: Query Parameter (Passive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?ver=3.3.37
| - https://demo1wp.shoporg.ru/wp-content/plugins/sassy-social-share/admin/css/sassy-social-share-svg.css?ver=3.3.37
| - https://demo1wp.shoporg.ru/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js?ver=3.3.37
| Confirmed By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/sassy-social-share/readme.txt
vdz-call-back
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/vdz-call-back/
| Last Updated: 2022-03-01T15:42:00.000Z
| The version is out of date, the latest version is 1.15.16
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 1.15.14 (80% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/vdz-call-back/readme.txt
woocommerce
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/woocommerce/
| Last Updated: 2025-06-23T11:50:00.000Z
| The version is out of date, the latest version is 9.9.5
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By:
| Urls In 404 Page (Passive Detection)
| Meta Generator (Passive Detection)
|
| Version: 5.9.1 (100% confidence)
| Found By: Query Parameter (Passive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.9.1
| - https://demo1wp.shoporg.ru/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=5.9.1
| - https://demo1wp.shoporg.ru/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.9.1
| - https://demo1wp.shoporg.ru/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.9.1
| - https://demo1wp.shoporg.ru/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.9.1
| - https://demo1wp.shoporg.ru/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.9.1
| Confirmed By: Meta Generator (Passive Detection)
| - https://demo1wp.shoporg.ru/, Match: 'WooCommerce 5.9.1'
yith-best-price-guaranteed-for-woocommerce-premium
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/yith-best-price-guaranteed-for-woocommerce-premium/
| Latest Version: 1.30.1
| Last Updated: 2023-12-18T00:00:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| The version could not be determined.
yith-woocommerce-quick-view
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/yith-woocommerce-quick-view/
| Latest Version: 2.5.0
| Last Updated: 2025-06-10T09:40:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| The version could not be determined.
yith-woocommerce-wishlist
| Location: https://demo1wp.shoporg.ru/wp-content/plugins/yith-woocommerce-wishlist/
| Last Updated: 2025-06-12T14:02:00.000Z
| The version is out of date, the latest version is 4.6.0
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 3.3.0 (100% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/yith-woocommerce-wishlist/README.txt
| Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
| - https://demo1wp.shoporg.ru/wp-content/plugins/yith-woocommerce-wishlist/README.txt
No WPScan API Token given, as a result vulnerability data has not been output.
You can get a free API token with 25 daily requests by registering at https://wpscan.com/register
Finished: Wed Jul 2 11:56:59 2025
Requests Done: 71
Cached Requests: 7
Data Sent: 27.396 KB
Data Received: 2.02 MB
Memory used: 267.078 MB
Elapsed time: 00:00:29
Color Scheme
Target
demo1wp.shoporg.ru
Scan method
Enumerate Popular plugins
Run command
wpscan --url https://demo1wp.shoporg.ru/ --enumerate p --random-user-agent --force --max-scan-duration 120