wpscan
What it’s for
A scanner built for WordPress: it fingerprints the core version, plugins and themes and flags known issues.
Where it shines
- Fast triage of any WordPress target
- Knows the WordPress ecosystem well
Where it falls down
- WordPress only
- Needs an API token for full vuln data, and it’s noisy
My take
[EDIT ME: your one-line verdict — day-one essential, learn later, or overhyped, in your own words.]