Security Scan Results
https://interior.go.ke
Scan complete
interior.go.ke
Critical — Immediate Action Needed
36 issues detected
Scanned 3 months ago
36
Total
1
Critical
1
High
25
Medium
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.15.20
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.13.36
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.6.6
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.15.17
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.15.20
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.15.19
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.15.20
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.15.21
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.13.40
Plugin 'form-maker' v1.0.0: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder [form-maker] < 1.15.19
Plugin 'google-language-translator' v6.0.20: Translate WordPress – Google Language Translator [google-language-translator] < 6.0.20
Plugin 'google-language-translator' v6.0.20: Translate WordPress – Google Language Translator [google-language-translator] < 6.0.20
Plugin 'elementor' v0.2.1: Elementor Website Builder - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template vulnerability
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 2.9.9 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 3.1.4 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 2.9.6 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 2.9.14 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 2.9.3 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 3.1.4 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 1.8.8 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 3.0.14 (closed)
Plugin 'elementor' v0.2.1: Elementor Website Builder – More Than Just a Page Builder [elementor] < 3.1.4 (closed)
SSL certificate error -- site may have an invalid or expired certificate
WP_DEBUG is disabled (no PHP errors visible)
Missing security header: X-Frame-Options -- Prevents clickjacking attacks
How to fix: Add to .htaccess: Header always set X-Frame-Options "SAMEORIGIN" — prevents clickjacking attacks.
Missing security header: X-Content-Type-Options -- Prevents MIME-type sniffing
How to fix: Add to .htaccess: Header always set X-Content-Type-Options "nosniff" — prevents MIME-type sniffing.
Missing security header: Strict-Transport-Security -- Enforces HTTPS connections
How to fix: Add to .htaccess or nginx: Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Missing security header: Content-Security-Policy -- Controls resource loading
Missing security header: Referrer-Policy -- Controls referrer information
Missing security header: Permissions-Policy -- Controls browser feature access
SSL certificate valid (59 days remaining) — issued by eMudhra Technologies Limited
HTTP correctly redirects to HTTPS
External JS from popular domain: translate.google.com (Tranco rank #1)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
External JS from popular domain: www.skynettechnologies.com (Tranco rank #37,266)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
2 external script(s) from popular domains (Tranco top 100K): www.skynettechnologies.com, translate.google.com
How to fix: These scripts are from globally popular domains. They are very likely legitimate services but were not in our curated whitelist.
Checked against 11 blacklist services
How to fix: Your site is flagged as malicious. Request a review at Google Search Console after cleaning up.
Your site needs immediate attention
We found critical security issues. Our experts can clean your site and fix all vulnerabilities within 24 hours.
Get Expert Cleanup — $49