I have been thinking about creating a Wordpress vulnerability scanner that would look for plugins being used by a Wordpress site and then search osvdb for known vulnerabilities.
I'm curious if there is an automated way to determine what plugins (and their version) a Wordpress site is using? So far the only idea I have had is to go through each page and look for paths to the default:
http://mysite.com/wp-content/plugins/whatever path and then perhaps dig into js files to see if you can find a version number.
Can anyone think of a better way to do this?