Security Scan Results
https://kntsite.president.go.ke
Scan complete
kntsite.president.go.ke
Critical — Immediate Action Needed
19 issues detected
Scanned 2 weeks ago
19
Total
2
Critical
1
High
6
Medium
WordPress 7.0.2: WordPress Core 6.9 - 7.0.1 - Remote Code Execution via REST API Batch Request Route Confusion
WordPress version 7.0.2 detected
Plugin 'pojo-accessibility' v1.0.0: Ally - WordPress Ally - Web Accessibility & Usability plugin <= 4.0.3 - Unauthenticated SQL Injection via URL Path vulnerability
Plugin 'pojo-accessibility' v1.0.0: Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
Plugin 'pojo-accessibility' v1.0.0: Ally <= 4.0.2 - Missing Authorization
Plugin 'pojo-accessibility' v1.0.0: One Click Accessibility <= 3.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Plugin 'pojo-accessibility' v1.0.0: Ally - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Update
Plugin 'pojo-accessibility' v1.0.0: One Click Accessibility < 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Plugin 'pojo-accessibility' v1.0.0: Ally - Web Accessibility & Usability < 3.8.1 - Cross-Site Request Forgery to Plugin Settings Update
Plugin 'pojo-accessibility' v1.0.0: Ally < 4.0.3 - Missing Authorization
Plugin 'pojo-accessibility' v1.0.0: Ally < 4.1.0 - Unauthenticated SQLi via URL Path
WP_DEBUG is disabled (no PHP errors visible)
6 of 6 security headers configured
SSL certificate valid (87 days remaining) — issued by Let's Encrypt
HTTP correctly redirects to HTTPS
REST API user enumeration blocked
wp-cron.php is publicly accessible (potential DDoS vector)
/wp-cron.php
How to fix: Disable WP-Cron in wp-config.php with define("DISABLE_WP_CRON", true) and use a real server cron job instead.
No external scripts detected
Checked against 11 blacklist services
Your site needs immediate attention
We found critical security issues. Our experts can clean your site and fix all vulnerabilities within 24 hours.
Get Expert Cleanup — $49