WP-Hunter

WP plugin recon & SAST tool for security researchers.

WP-Hunter is a powerful reconnaissance and Static Application Security Testing (SAST) tool for WordPress plugins and themes. It goes beyond basic scanning by evaluating vulnerability probability through heuristic risk scoring (VPS). It features a modern real-time Web Dashboard, offline recon via local database syncing, and deep Semgrep-powered source code analysis. Designed for bug bounty hunters and pentesters to easily identify high-risk, abandoned, or vulnerable plugins.