How wpscanteam/vulnerablewordpress works
This repository packages a vulnerable WordPress environment for local use in Docker, exposing HTTP and MySQL ports. Its user workflow is to build and run the container, then access the site or open a shell in the running container. The included PHP utility supports database-wide search and replacement, including serialized data. The README documents the run interface, and the PHP excerpt documents the utility’s behavior; the Dockerfile, startup script, and configuration contents were not sampled, so their internal wiring is not asserted.
Main entry points: Dockerfile Docker image · searchreplacedb2.php Search and replace
Components 11
Container runtime
- Docker image
Dockerfile - Startup script
start.sh - MySQL service
WordPress site
- HTTP interface
- WordPress archive
latest.tar.gz - Virtual host config
files/vhost.conf - Header config
files/header.conf - Robots rules
files/robots.txt
Database utility
- Search and replace
files/searchreplacedb2.php - WordPress database
Other components
- Operator
Connections 5
- Operator → Docker image: builds image
- Operator → HTTP interface: connects over HTTP
- Operator → MySQL service: connects on port 3306
- Operator → Docker image: starts container
- Search and replace → WordPress database: searches and updates