WordPress Security Page

Overview of Vulnerabilities

The page is divided into three severity categories:

High Vulnerabilities

These are critical and require immediate attention.

You’ll see:

• CVE ID (Common Vulnerabilities and Exposures)

• Affected Component (e.g. plugin or core version)

• CWE Reference (type of weakness, such as deserialisation or cross-site scripting)

• A direct View button to learn more about the vulnerability

Plan to fix high-severity issues immediately to avoid exploitation.

Medium Vulnerabilities

These are less urgent but still need to be addressed during regular maintenance.

• Often related to sanitisation, permissions, or older plugin versions

• May be fixed by simply updating the associated plugin or theme

These should be scheduled as part of your normal update cycle.

Unknown Vulnerabilities

These are flagged but haven’t yet been categorised or scored.

• They may still pose a risk, especially if they’re linked to outdated components

• Best practice is to treat them with caution until confirmed as safe or patched

Viewing CVE Details

Each row has a “View” button that takes you to more detailed information, including:

• Vulnerability description

• Affected versions

• Potential impact

• Remediation or patch notes (if available)

Varsuite Core integrates directly with public CVE databases and known vulnerability feeds to ensure the most up-to-date insights.

How Varsuite Core Helps

• Real-Time Sync: Scans update automatically as your site changes or plugins update

• Grouped by Severity: Helping you prioritise threats efficiently

• Action-Oriented: Direct links to updates or affected plugins/themes where fixes are available

Best Practices

• Always backup before applying fixes or updates.

• Review security vulnerabilities weekly, especially if running high-traffic or ecommerce sites.

• Enable Alerts under the Monitoring section to be notified when new vulnerabilities are detected.

By using Varsuite Core’s WordPress Security dashboard, agencies and developers can actively reduce risk, respond to threats faster, and protect their clients sites.