Chapter 8

1. Yes. If WordPress is installed with the default configuration, the reconnaissance techniques discussed in this chapter are enough to get information on all versions of WordPress.

2. If the wp-admin directory is not accessible, you can always try the wp-login.php file. The file is accessible to users with normal privilege settings and for the wp-admin directory as well. In case you're still not able to access it, try adding the wp-login.php?action=register query to the URI.

3. Yes, it is. WordPress is an open source CMS that is used widely. Unlike WordPress core, some of the themes and templates are under the paid subscription license.