wfasa, thanks for checking. The fix suggested by Greg did not work.
I just sent you the Diagnostics (along with the result of the scan).
The site has its own database but sits as a subdirectory of another site.
When I run a scan on the “umbrella” site with the option “Scan files outside your WordPress installation” checked, the scan completes. So I assume it’s keeping me safe. However, it would be good if the scan worked on the subsites.
Thank you so much for reaching out!