Over 27% of all websites globally run WordPress. This makes WordPress a very highly targeted piece of software. There are numbers of different aspects to consider when attempting to discover vulnerabilities in WordPress. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack) discusses how to find vulnerabilities in WordPress sites and how to exploit them.
WordPress Security Guide - http://www.wpbeginner.com/wordpress-security/
WordPress Vuln Database - www.wpvulndb.com