WordPress Vulnerability Report
Your WordPress website is potentially vulnerable to attack!
Scan URL: https://visie.com.au/
Scan Date: Fri Nov 17 02:25:07 2017 (UTC+1)
WordPress Version: can
Risk Factor: 1.4
Sign-up for free and view the full report
Is my site really safe?
We have a good indication that your site is safe. This means that currently your data is probably safe. It is essential that you always keep your WordPress up to date. Below we will give you more information about how to improve security and some tips to prevent future vulnerabilities. Disclaimer: Since we used automated software there could be a small chance that your site is vulnerable because we made a false negative. Also, we don't test if the passwords you use are secure so you should do that yourself. In addition, we don't provide a full overview of all vulnerabilities and we don't scan your server for server security.
What did we scan?
WPSec.com uses the advanced scanning technology of WPScanner which we combine with our own intelligent scanning algorithms. We scan for known bugs that have been indexed in our WordPress Vulnerability Database, which contains over 14000 reported vulnerabilities. Our scanner tries to identify the plugins you run and will compare their versions against the bug database. In addition, we scan for several well-known mistakes that people make when setting up their WordPress installation.
WordPress is out of date
You are running an outdated WordPress version. Please update to the latest version.Your are running WordPress version can. This version is an outdated version of WordPress. It is best practice to keep your WordPress installation up to date. Therefore, it is essential to update to the newest version of WordPress. Automatically update in the WordPress backend or download the newest WordPress version from the link below.
Plugins & Themes
We have identified several plugins and themes in your WordPress installation. Always keep them up to date.2m[+][0m Name: wsfolio-child
Installation Directory
2m[+][0m Name: animate-it - v2.2.1
2m[+][0m Name: contact-form-7 - v4.9.1
2m[+][0m Name: essential-grid
Installation Directory
2m[+][0m Name: google-analytics-for-wordpress - v6.2.4
2m[+][0m Name: revslider
Installation Directory
Plugin Potentially Vulnerable - See Why »
2m[+][0m Name: siteorigin-panels - v2.5.14
2m[+][0m Name: wsfolio-shortcodes
Installation Directory
Information Leakage
While leaking information is not a direct threat to security, it can facilitate an attacker to gain access to your systems. Therefore, it is recommended to review the following leaked info to see if it contains sensitive data.Interesting entry from robots.txt: https://visie.com.au/wp-admin/admin-ajax.php
Interesting header: ALT-SVC: quic=":443"; ma=2592000; v="35,37,38,39"
Interesting header: CF-RAY: 3bef3dd17df726ae-FRA
Interesting header: LINK: ; rel="https://api.w.org/"
Interesting header: LINK: ; rel=shortlink
Interesting header: SERVER: cloudflare-nginx
Interesting header: SET-COOKIE: wfvt_3773659859=5a0e48ad87905; expires=Fri, 17-Nov-2017 02:55:49 GMT; Max-Age=1800; path=/; secure; httponly
Interesting header: STRICT-TRANSPORT-SECURITY: max-age=0; includeSubDomains; preload
Interesting header: X-CONTENT-TYPE-OPTIONS: nosniff
Interesting header: X-TURBO-CHARGED-BY: LiteSpeed
XML-RPC Interface available under: https://visie.com.au/xmlrpc.php