WordPress reconnaissance using Metasploit