WordPress Vulnerability Report
Your WordPress website is vulnerable to attack!
Scan URL: http://54.201.224.15:14099/
Scan Date: Sun Feb 25 16:32:39 2018 (UTC+1)
WordPress Version: 4.9.4
Risk Factor: 3.1
Sign-up for free and view the full report
Is my site really vulnerable?
We have a good indication that your site is vulnerable and can be exploited by hackers or malware bots. This means that currently your data is not safe and the integrity of your WordPress cannot be guaranteed. It is essential that you upgrade to the latest version for your WordPress installation and all the themes and plugins you use. Below we will give you more information about how to improve security and about what issues we found on your website. Disclaimer: Since we used automated software there could be a small chance that your site is safe because we made a false positive. In addition, we don't provide a full overview of all vulnerabilities and we don't scan your server for server security.
What did we scan?
WPSec.com uses the advanced scanning technology of WPScanner which we combine with our own intelligent scanning algorithms. We scan for known bugs that have been indexed in our WordPress Vulnerability Database, which contains over 14000 reported vulnerabilities. Our scanner tries to identify the plugins you run and will compare their versions against the bug database. In addition, we scan for several well-known mistakes that people make when setting up their WordPress installation.
WordPress is out of date
You are running an outdated WordPress version. Please update to the latest version.Your are running WordPress version 4.9.4. This version is an outdated version of WordPress. It is best practice to keep your WordPress installation up to date. Therefore, it is essential to update to the newest version of WordPress. Automatically update in the WordPress backend or download the newest WordPress version from the link below.
Plugins & Themes
We have identified several plugins and themes in your WordPress installation. Always keep them up to date.WordPress Is Vulnerable - See Why »
2m[+][0m Name: twentyseventeen - v1.4
2m[+][0m Name: sam-pro-free - v1.8.2.51
Update to version 2.4.1.92
Plugin Is Vulnerable - See Why »
Information Leakage
While leaking information is not a direct threat to security, it can facilitate an attacker to gain access to your systems. Therefore, it is recommended to review the following leaked info to see if it contains sensitive data.Full Path Disclosure (FPD) in 'http://54.201.224.15:14099/wp-includes/rss-functions.php':
Interesting header: LINK: ; rel="https://api.w.org/"
Interesting header: SERVER: Apache/2.4.10 (Debian)
Interesting header: X-POWERED-BY: PHP/5.6.33
This site has 'Must Use Plugins' (http://codex.wordpress.org/Must_Use_Plugins)
XML-RPC Interface available under: http://54.201.224.15:14099/xmlrpc.php