wpscan

Enumerate:

wpscan --url <URL> --enumerate ap,at,cb,dbe,u1-5 | tee ./wpscan/results.txt

Bruteforce password attack

wpscan --url <URL> --passwords /usr/share/wordlists/rockyou.txt --usernames admin,<USER2>,<USER3> | tee wpscan/admin-bruteforce.txt