A CVE (Common Vulnerability and Exposure) is a publicly documented security flaw. Critical CVEs in your content management system (CMS) or its plugins mean attackers have a known, published method to compromise sites running that version.
Why this matters
Attackers actively scan the internet for sites running vulnerable versions - often within hours of a CVE being published. A successful attack can result in your site being defaced, used to serve malware, or customer data being stolen.
How to fix it
Update your CMS and all plugins to their latest versions immediately. Enable automatic security updates where possible, and remove any plugins you no longer use.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.