SymWP, a concolic analysis framework designed specifically for WordPress plugin security. SymWP integrates an off-the-shelf symbolic execution engine and targets the PHP interpreter, allowing it to analyze plugin behavior at a semantic level with minimal human intervention.

This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt. Simple and efficient, it helps security researchers and admins detect and address risks quickly.

OD&H's scanner for CVE-2024-25600 vulnerability in the Bricks Builder WordPress plugin. For use in Try Hack Me (THM) environments.