This is the easiest technique. All we have to do is visit the readme.html page and it discloses the version number in the center. The original purpose of this file was to give information to first-time users of the CMS on how to move ahead with the installation and usage of WordPress. It is supposed to be deleted once the installation and setup are complete. When using any tools, including Metasploit, always check the version number for the WordPress installation before performing any kind of exploitation.

So, make sure you know what version you're trying to pen-test. You can see an example of readme.html in the following screenshot:

Next, we will look at the meta generator.