Vulnerability assessment for WordPress