Returns Too Many False Positives For the Inexprienced

I professional “harden WP” and I thought to check out this plug

I ran it on a very secure set up where the wp-content directory and all the child directories were renamed and on a path under the server path. All the common vulnerabilities this this plug searches for were removed prior to execution of the plugin.

It returned about 40% of the results as false-positives. This would be very miss-leading for those who are inexperienced so I would not recommend it even for those.