Security Scan Results
https://www.auroracollege.nt.ca
Scan complete
www.auroracollege.nt.ca
Good Security
15 issues detected
Scanned 1 month ago
15
Total
0
Critical
0
High
4
Medium
Plugin 'revslider' v6.7.38: Slider Revolution < 6.7.38 - Contributor+ Arbitrary File Read
Plugin 'wp-meta-and-date-remover' v1.1: Freemius SDK <= 2.4.2 - Missing Authorization Checks
Plugin 'wp-meta-and-date-remover' v1.1: WP Meta and Date Remover < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via settings
Plugin 'wp-meta-and-date-remover' v1.1: WP Meta and Date Remover <= 2.3.0 - Cross-Site Request Forgery via updateSettings
WP_DEBUG is disabled (no PHP errors visible)
PHP 8.4.21 detected (supported version)
X-Powered-By header exposed: PHP/8.4.21 — reveals server software
How to fix: Hide X-Powered-By header. In php.ini set expose_php = Off, or add Header unset X-Powered-By to .htaccess.
Missing security header: Content-Security-Policy -- Controls resource loading
5 of 6 security headers configured
SSL certificate valid (144 days remaining) — issued by DigiCert Inc
HTTP correctly redirects to HTTPS
REST API user enumeration blocked
wp-cron.php is publicly accessible (potential DDoS vector)
/wp-cron.php
How to fix: Disable WP-Cron in wp-config.php with define("DISABLE_WP_CRON", true) and use a real server cron job instead.
2 trusted external script(s): maps.googleapis.com (Google), www.googletagmanager.com (Google)
Checked against 11 blacklist services
Want to find hidden issues?
This surface scan checks what's publicly visible. A deep scan connects via SSH to check file integrity, database injections, and hidden backdoors.
Run Deep Scan — $1