🛡️ Check the most important issues and security WordPress website

The tool scans the CSS and JavaScript files loaded into the page code, tracks the wp-content/themes and wp-content/plugins paths, and compares them to the database of the 500 most popular global plugins and templates, while extracting the name and version of the active template.

The xmlrpc.php file was once used to connect to external WordPress applications, but it has become a common vulnerability that hackers exploit to launch Denial of Service (DDoS) and Brute Force attacks via the system.multicall function to try hundreds of passwords in a single request.

The default WordPress wp-json/wp/v2/users path displays the Admin Usernames publicly for any visitor, making it easier for attackers to learn the account name and start guessing the password. This path can be closed programmatically to prevent unregistered visitors from viewing the data.

Announcing the WordPress version number in the generator tag inside the page header reveals to hackers the known security vulnerabilities (CVEs) of that version if it is not updated to the latest version, making it an easy target for automated hacking tools.

We provide advanced security services that include closing all vulnerabilities, activating WAF firewalls, scanning and removing malware, improving the speed of WooCommerce databases, and moving the site to cloud servers dedicated to WordPress.