WordPress Security Page

The WordPress Security page in Varsuite Core provides a clear and actionable overview of all detected vulnerabilities across your WordPress site.

Overview of Vulnerabilities

The page is divided into three severity categories:

---

High Vulnerabilities

These are critical and require immediate attention.

You’ll see:

• CVE ID (Common Vulnerabilities and Exposures)

• Affected Component (e.g. plugin or core version)

• CWE Reference (type of weakness, such as deserialisation or cross-site scripting)

• A direct View button to learn more about the vulnerability

Plan to fix high-severity issues immediately to avoid exploitation.

---

Medium Vulnerabilities

These are less urgent but still need to be addressed during regular maintenance.

• Often related to sanitisation, permissions, or older plugin versions

• May be fixed by simply updating the associated plugin or theme

These should be scheduled as part of your normal update cycle.

---

Unknown Vulnerabilities

These are flagged but haven’t yet been categorised or scored.

• They may still pose a risk, especially if they’re linked to outdated components

• Best practice is to treat them with caution until confirmed as safe or patched

---

Viewing CVE Details

Each row has a “View” button that takes you to more detailed information, including:

• Vulnerability description

• Affected versions

• Potential impact

• Remediation or patch notes (if available)

Varsuite Core integrates directly with public CVE databases and known vulnerability feeds to ensure the most up-to-date insights.

---

How Varsuite Core Helps

• Real-Time Sync: Scans update automatically as your site changes or plugins update

• Grouped by Severity: Helping you prioritise threats efficiently

• Action-Oriented: Direct links to updates or affected plugins/themes where fixes are available

---

Best Practices

• Always backup before applying fixes or updates.

• Review security vulnerabilities weekly, especially if running high-traffic or ecommerce sites.

• Enable Alerts under the Monitoring section to be notified when new vulnerabilities are detected.

---

By using Varsuite Core’s WordPress Security dashboard, agencies and developers can actively reduce risk, respond to threats faster, and protect their clients sites.