Vulnerability scan gives warnings even patched

Hi @trellat, glad you reached out!

Switching off the Scheduled Site Scan module should stop the Scheduled Site Scan emails from sending, and if you’re seeing manual scans return as “Clean” there is a chance that the email could be: (1) from a different site OR (2) outdated scan emails that got stuck in the server. 

The thread that you found will help resolve this if you’re dealing with scenario #1. Have you checked if you have a staging site somewhere with the Solid Security plugin still installed and activated?

To investigate further, go to Security > Logs page, click “Screen Options” at the top-right, and check both the “Show Debug entries” and “Show Process entries” boxes (see here), then apply the changes to load more logs. 

Next, filter the Notification Center module and view the details of the most recent “Sending site scan results” entry (see here) to know if the email you received was triggered from the site. If you can send a screenshot of what you see, that would help (blur the info you prefer not to share).

If you’ve confirmed that there is no staging/other site and the email was not triggered from your live site, I’d recommend checking the email logs/server to investigate if you’re receiving notifications that got stuck there.

Please let us know what you can find.

Hi chandelierrr, thanks for your feedback. Don`t really know if we are in any of those scenarios.</p> <p>First one, sure not. The second one, I don’t think so because that notifications have been updating throught this time, first one warns about three issue, again already patched, and now we have five of theme. It don`t seem a stuck in the server email.

• This reply was modified 6 months ago by trellat.
• This reply was modified 6 months ago by trellat.