WordPress: security warning received

We continuously check whether new security vulnerabilities become known for the WordPress version, the plugins or the themes on your website. As soon as a vulnerability is reported, you receive an email with the content «WP Toolkit has detected new vulnerabilities on WordPress sites under your care». It lists the affected component and the rating (e.g. «High» or «Medium»).

Why does the warning arrive even though automatic updates are active?

We deliberately send the warning immediately and do not wait until the automatic update has run. This way you know as early as possible and can react yourself if needed. It can therefore happen that you receive a warning and the update is installed automatically shortly afterwards. In that case there is nothing more to do.

How to check whether you need to do anything

1. Log in to Plesk and open the «WordPress» section (WP Toolkit) on the left.
2. For your website you can see whether WordPress, plugins or themes still have pending updates or security warnings.
3. If the warning has disappeared and the current version is installed, everything is done.
4. If an update is still pending, install it via «Update». Create a backup of your website first, for example with the Backup Manager.

Automatic updates for plugins and themes

Security updates for WordPress itself run automatically with us. For plugins and themes this is not always switched on. Outdated plugins in particular are the most common cause of hacked WordPress websites. In the WP Toolkit you can specify under «Updates» for your website that plugins and themes are updated automatically as well.

Who is responsible?

Maintaining the website itself, i.e. WordPress content, plugins and themes, is up to you or your web designer. If you would like to hand this over, we are happy to take care of WordPress maintenance for you. Contact us via a ticket.