Source evidence

Confusing Reports

WPScan – WordPress Security Scanner · support · 2021-07-13T18:00:00+00:00

WPScan – WordPress Security Scanner plugin evidence original source source API

complaintsentiment

mediumseverity

0.8relevance

2replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

RichardWantsToKnow unresolved

Received a report from WPscan this morning stating it appears one of my sites is not using https and is not secure. When I load the homepage in the current version of Firefox, the lock/icon has an exclamation mark and when clicked, it states, “Connection not secure. Parts of this page are not secure, (such as images).” Then when I rerun the the https test, it states, “Your website seems to be using HTTPS.” Why would that be?? When I refreshed the page, the lock/icon showed as secure; Firefox apparently now sees it as secure; but what would have triggered the unsecured flag in FF that appears to also have been picked up by wpscan? And more importantly, how can images (or other files) not be covered by the certificate?? All the images on the site are within the public_html on the hosting server, none are pulled from outside; at least as long as no one has tampered with them. Anyone able to provide some insights please? Thanks in advance. Hi Richard, Apologies for the delayed response. Could you email us your website URL, please? contact-at-wpscan.com Also, what hosting provider are you using? Thanks, Ryan You requested I email you my URL and hosting provider. Problem is, the email you sent me is from a ‘noreply’ email address. Not comfortable posting hosting info on a public forum.

Commercial Context

Opportunity

trust and abuse-prevention operations

Security abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: Confusing Reports: users show support, migration pain that may indicate a product gap.

Evidence quote: And more importantly, how can images (or other files) not be covered by the certificate??

Affected feature: email

support migration email

Plugin

API

WPScan – WordPress Security Scanner

8.0K active installs · 270.9K downloads · rating 76.0

hack security vulnerability wpscan wpvulndb

Comments

2 shown

ethicalhack3r 2021-07-26T07:45:00+00:00

Hi Richard, Apologies for the delayed response. Could you email us your website URL, please? contact-at-wpscan.com Also, what hosting provider are you using? Thanks, Ryan

RichardWantsToKnow 2021-07-26T11:44:00+00:00

You requested I email you my URL and hosting provider. Problem is, the email you sent me is from a ‘noreply’ email address. Not comfortable posting hosting info on a public forum.