WordPress checks

For WordPress sites Vigavo compares what the site reveals with public vulnerability data:

• wp_outdated_core: the WordPress version is far behind the current release.
• wp_known_vulnerability (security) / known_vulnerability_low (hygiene): a plugin or theme version visible on the site has a published vulnerability.
• generator_version: the page code announces the exact WordPress version.

From outside, only versions the site exposes can be checked. With the Vigavo plugin the daily heartbeat reports every installed plugin and theme with its version, so the vulnerability check covers all of them, and you are alerted when a new administrator account appears.

Fixing

Update WordPress, plugins and themes from Dashboard, Updates; remove plugins you do not use. Then verify the fix.