FALKEN'S MAZE / CHECKS / KNOWN VULNERABILITIES

Known vulnerabilities

What Joshua checks

Looks up the installed WordPress, plugin and theme versions in the Wordfence Intelligence vulnerability database (copyright Defiant Inc.). With the Plugin Recon WordPress plugin, every installed plugin and theme.

Vulnerability data from Wordfence Intelligence, copyright Defiant Inc., used under its licence. Reports link each vulnerability to its Wordfence record and show the data's copyright notices.

Why it matters

Attackers scan the web for sites running versions with published vulnerabilities, often within days of the disclosure.

How to fix it

Update each item to the version that fixes it. Where there's no fix yet, remove the plugin or theme, or switch to an alternative.

In the Maze Score

Worth

15 points (half for a warning)

Severity

Critical

Runs on

Plans with the Plugin Recon add-on

Related checks

• WordPress core versionPlugin Recon
• Plugin versionsPlugin Recon
• User enumerationPlugin Recon
• Theme versionsPlugin Recon
• XML-RPCPlugin Recon
• Exposed filesPlugin Recon
• PHP and WordPress settingsPlugin Recon
• Abandoned pluginsPlugin Recon
• Login protectionPlugin Recon