Wait, what? WPScan is a standalone Ruby script. You run it against a Wordpress site. There's nothing to install on the WP website in question. You can even run

Wait, what? WPScan is a standalone Ruby script. You run it against a Wordpress site. There's nothing to install on the WP website in question. You can even run it against public WP websites if you wanted to (although I imagine you might get some sternly worded letters from some).