WP-SHELLSTORM targeted WordPress and other CMS sites at scale. Patch known vulnerable plugins, check for unexpected files and users, verify backups, and rotate credentials.