I actually think this is brilliant. Let the scanner IP get access to the most unpatched Wordpress, maybe even generate some garbage ERP numbers.

Once the asset scanner detects the vulns, everyone will kick into high gear to patch this.