Visit site

Security

What we check, what we found, and what is locked down.

No known vulnerabilities, and 7 of 8 hardening steps in place

The score counts known vulnerabilities in the versions installed, checked against WPVulnerability.net. Last scan 17 hours ago.

Vulnerabilities

WordPress core, 14 plugins and 2 themes

None found
CheckedInstalledResultWhat happens if one is found
WordPress core7.1.4SafeSecurity releases install overnight, with a restore point first
Plugins14, all currentSafeShown here with its severity and one button to update
Themes2, all currentSafeShown here with its severity and one button to update

Hardening

Settings that close the usual ways in

7 of 8
Security keys renewed in the last 180 days
No renewal on record. Renewing signs everyone out of wp-admin once.
Plugin and theme file editor is off
In place
Debug output is off
In place
WordPress core is current
In place
Plugins and themes are current
In place
No inactive plugins left installed
In place
No account named “admin”
In place
Administrator accounts kept to a minimum
1 administrator
In place

Core files

Unchanged

Every WordPress file is compared with the official checksums. A changed file is how a break-in shows up.

Last verified 3 days ago

Who can get in

wp-admin opens from the portal
No password to copy or share
On
Two-step sign-in to the portal
Protects every site in the account