Security Audit is wrapper around pair of third-party tools that can help you identify potential vulnerabilities in your site.
It does not analyze the code of your site, nor does it correct any issues it finds it compares what you've got with information regarding security..
Specifically, Security Audit is wrapper around PHPSecInfo and the WPScan Vulnerability Database API..
Navigate there and you'll have tabs for PHPSec Info, Plugin Scanner, Theme Scanner, and WordPress Core Scanner.
Click on tab to initiate scan of that part of your site.
The 'scanner tabs look at the self-reported versions of your software and compare those versions to in the database.
Resolved, open and undetermined issues will be displayed and color-coded to indicate the level of concern you should probably have..
This can be useful for determining if given pending plugin update is security fix or just bug feature related it can also flag known issues with code that has not yet been updated — always good to know..
PHPSecInfo tab reports information about your PHP configuration, done by calling PHPSecInfo library bundled with this plugin.
In many cases you may be unable to change your PHP configuration it depends on the level of control you have over your hosting environment...
Read more
Related items:
