# simple scan (no exploitation)
wpscan --url $URL --enumerate u
# enumerate a range of users
wpscan --url $URL --enumerate u1-100
wpscan --url $URL --username $username --passwords "/path/to/wordlist.txt"
# enumerate and bruteforce users
wpscan --url $URL --enumerate u --passwords "/path/to/wordlist.txt"