usage:

wpscan --url URL -e vt,vp
  • uname bruteforcing
wpscan --url http://blog.thm/ -U unames.txt -P /usr/share/wordlists/rockyou.txt