Known vulnerabilities

No WordPress plugins or themes with known vulnerabilities

Published CVEs affecting the software versions your servers reveal.

Why it matters

Vulnerable plugins are the most common way WordPress sites are taken over: bots try published flaws against every site that loads the plugin, often within days of disclosure. The result is defaced pages, spam, card skimmers or a stolen customer database.

How to fix it

Quick fix · under 1 hour

Take a backup of the site and its database.
Update the plugin or theme from the dashboard (Plugins or Appearance > Themes), or with WP-CLI.
If no fixed version exists, deactivate the component and replace it.
Remove plugins and themes you do not use: deactivated code can still be reachable.
Re-run the scan to confirm.

WP-CLI

wp plugin update <plugin-slug>
wp theme update <theme-slug>
wp plugin list --update=available

Automatic updates (wp-config.php)

add_filter( 'auto_update_plugin', '__return_true' );
add_filter( 'auto_update_theme', '__return_true' );

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free