Outdated CMS, plugins and components

Websites are built from many moving parts — a content-management system, themes, plugins, frameworks and libraries — and any one of them with a known vulnerability is a way in. The test checks for outdated software, CMS and component vulnerabilities.

This matters because:

• Vulnerabilities in popular platforms and plugins are public, and attackers scan the whole internet for sites still running them.
• A single out-of-date plugin can undermine an otherwise well-built site.
• It is easy to update the core CMS and forget the add-ons, or vice versa.

The tester identifies where your site is running components with known weaknesses. The report lists them and what needs updating — often some of the quickest and highest-value fixes you can make, since the vulnerabilities are already understood and the patches already exist.