wpscan-vulnerability-test-bench

Standardised setup for researching WordPress plugin- and theme vulnerabilities. Maintained by Automattic on GitHub, where it has earned 33 stars from the community.

It's actively developed around ddev, docker, vulnerability-assessment, and is a solid reference for anyone building with these tools.