Security Scan Results
https://avista.com.pl
Scan complete
avista.com.pl
Poor — Multiple Issues Found
20 issues detected
Scanned 1 month ago
20
Total
0
Critical
5
High
5
Medium
Plugin 'elementor' v0.2.1: Elementor <= 3.18.1 - Authenticated(Contributor+) Arbitrary File Upload to Remote Code Execution via Template Import
Plugin 'elementor' v0.2.1: Elementor <= 3.19.0 - Authenticated(Contributor+) Arbitrary File Deletion and PHAR Deserialization
Plugin 'elementor' v0.2.1: Elementor Website Builder <= 1.7.12 - Missing Authorization
Plugin 'elementor' v0.2.1: Elementor Website Builder <= 2.7.4 - Arbitrary File Upload
Plugin 'elementor' v0.2.1: Elementor Website Builder <= 2.8.3 - Cross-Site Scripting
Plugin 'elementor' v0.2.1: Elementor <= 3.12.1 - Authenticated(Administrator+) SQL Injection via 'replace_urls'
Plugin 'elementor' v0.2.1: Elementor Website Builder <= 2.9.5 - Authorization Bypass
Plugin 'elementor' v0.2.1: Elementor Website Builder <= 3.16.4 - Missing Authorization to Arbitrary Attachment Read
Plugin 'elementor' v0.2.1: Elementor Website Builder <= 3.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg()
WP_DEBUG is disabled (no PHP errors visible)
Missing security header: Strict-Transport-Security -- Enforces HTTPS connections
How to fix: Add to .htaccess or nginx: Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Missing security header: Content-Security-Policy -- Controls resource loading
Missing security header: Referrer-Policy -- Controls referrer information
Missing security header: Permissions-Policy -- Controls browser feature access
2 of 6 security headers configured
SSL certificate valid (48 days remaining) — issued by Let's Encrypt
HTTP correctly redirects to HTTPS
REST API user enumeration blocked
1 trusted external script(s): cdn-cookieyes.com (Consent/Privacy)
Checked against 11 blacklist services
Your site needs immediate attention
We found critical security issues. Our experts can clean your site and fix all vulnerabilities within 24 hours.
Get Expert Cleanup — $49