https://planikafires.pl
Scan complete
39 issues detected
Scanned 1 month ago
39
Total
0
Critical
2
High
22
Medium
Plugin 'contact-form-7' v6.0.4: Contact Form 7 <= 6.0.5 - Order Replay Vulnerability
Plugin 'duracelltomi-google-tag-manager' v1.20.3: GTM4WP <= 1.22.3 - Unauthenticated Stored Cross-Site Scripting via WooCommerce Billing Fields
WP_DEBUG is disabled (no PHP errors visible)
Missing security header: Strict-Transport-Security -- Enforces HTTPS connections
How to fix: Add to .htaccess or nginx: Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Missing security header: Content-Security-Policy -- Controls resource loading
Missing security header: Permissions-Policy -- Controls browser feature access
3 of 6 security headers configured
SSL certificate valid (36 days remaining) — issued by Google Trust Services
HTTP correctly redirects to HTTPS
User enumeration possible via REST API -- found: j-krukowskaplanikafires-com, planika, p-guzekplanikafires-com, patrykg, paulina-trychon
How to fix: Disable the REST API users endpoint with a plugin like Disable REST API or add a filter to block /wp/v2/users.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
External JS from popular domain: js-eu1.hsforms.net (Tranco rank #9,233)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
External JS from popular domain: js-eu1.hsforms.net (Tranco rank #9,233)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
External JS from popular domain: js-eu1.hsforms.net (Tranco rank #9,233)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
External JS from popular domain: js-eu1.hsforms.net (Tranco rank #9,233)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
External JS from popular domain: js-eu1.hs-scripts.com (Tranco rank #3,575)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
Unknown external JavaScript from: planikafires.com
How to fix: Review this script source. If it's legitimate (analytics, chat widget), no action needed. If unknown, investigate and remove.
External JS from popular domain: www.skynettechnologies.com (Tranco rank #33,652)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
4 trusted external script(s): cdn.jsdelivr.net (CDN), cdnjs.cloudflare.com (CDN), planikafires.com (same server), www.google.com (Google)
6 external script(s) from popular domains (Tranco top 100K): www.skynettechnologies.com, js-eu1.hsforms.net, js-eu1.hs-scripts.com
How to fix: These scripts are from globally popular domains. They are very likely legitimate services but were not in our curated whitelist.
Found 19 unknown external JS source(s): planikafires.com
Checked against 11 blacklist services
We found critical security issues. Our experts can clean your site and fix all vulnerabilities within 24 hours.
Get Expert Cleanup — $49