WordPress Exploitation

Cross-platform resources for WordPress Exploitation: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

WordPress Exploitation

This page aggregates cross-platform resources to practice WordPress Exploitation: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/network-services-pentesting/pentesting-web/wordpress.html

HTB machines practicing WordPress Exploitation (13)

Machine	OS	Difficulty
Apocalyst	Linux	MEDIUM
Aragog	Linux	MEDIUM
Backdoor	Linux	EASY
Blocky	Linux	EASY
Brainfuck	Linux	INSANE
Enterprise	Linux	MEDIUM
Monitors	Linux	HARD
Paper	Linux	EASY
Phoenix	Linux	HARD
Pressed	Linux	HARD
TartarSauce	Linux	MEDIUM
Tenten	Linux	MEDIUM
Travel	Linux	HARD

TryHackMe rooms practicing WordPress Exploitation (8)

Room	Difficulty	Type	Access	Official
Bypass Really Simple Security	EASY	Walkthrough	🟢 Free	Open
Web Enumeration	EASY	Walkthrough	🔵 VIP	Open
Web Security Essentials	EASY	Walkthrough	🟢 Free	Open
Wordpress: CVE-2021-29447	EASY	Challenge	🟢 Free	Open
AWS S3 - Attack and Defense	MEDIUM	Walkthrough	🟢 Free	Open
Blog	MEDIUM	Challenge	🟢 Free	Open
Wekor	MEDIUM	Challenge	🟢 Free	Open
Jack	HARD	Challenge	🔵 VIP	Open

Related skills

• /en/skills/rce

---

← Back to the full glossary

Last updated: 2026-05-09