WpScan is an open source software to scan wordpress sites for security.

https://wpscan.org

It is a program written in Ruby programming language, source code available at

https://github.com/wpscanteam/wpscan

Easiest way to run it is using docker.

docker run -it --rm wpscanteam/wpscan -u https://yourblog.com