Detalhe do ativoAtivo monitorado
Entrar
Voltar para ativos
testerocha.com.br HTTP inseguro
WordPress · Frota 20i · último scan agora
100score de risco
Configurar
Postura de segurança1/5
Conexão
Vulnerab.
Integridade
Config
Backup
Integridade & snapshotsbaseline hoje 06:00
core WordPresschecksum divergente
Findings do ativo
Baixo
HTTPS não forçado (conexão insegura) em testerocha.com.br
Postura WP · conf. Alta · 20iwp-1nrsfkb
Aberto
Médio
Plugin desatualizado: akismet 5.7 → 5.7.2 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-7uw4f2
Resolvido
Alto
Plugin vulnerável: all-in-one-wp-migration 7.106 (CVE-2026-17533, CVE-2026-19949) em testerocha.com.br
Vulnerabilidade WP · conf. Alta · 20iwp-rrdwy4CVE-2026-17533CVE-2026-19949
Aberto
Médio
Plugin desatualizado: cookie-notice 3.1.4 → 3.1.9 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-1pbdjma
Aberto
Médio
Plugin desatualizado: elementor 4.2.2 → 4.2.3 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-1q2y1kg
Aberto
Crítico
Plugin vulnerável: elementor-pro 3.15.1 (CVE-2026-32475, CVE-2025-3076, CVE-2024-4107, CVE-2024-35656, CVE-2024-50555, CVE-2024-1364, CVE-2024-2781, CVE-2024-2121, CVE-2024-8494, CVE-2024-2120, CVE-2024-23523, CVE-2024-1521) em testerocha.com.br
Vulnerabilidade WP · conf. Alta · 20iwp-dxk6cmCVE-2026-32475CVE-2025-3076CVE-2024-4107CVE-2024-35656CVE-2024-50555CVE-2024-1364CVE-2024-2781CVE-2024-2121CVE-2024-8494CVE-2024-2120CVE-2024-23523CVE-2024-1521
Aberto
Alto
Plugin vulnerável: gp-premium 2.3.1 (CVE-2024-3469, CVE-2026-66627) em testerocha.com.br
Vulnerabilidade WP · conf. Alta · 20iwp-ez1mfuCVE-2024-3469CVE-2026-66627
Aberto
Médio
Plugin desatualizado: jeg-elementor-kit 3.2.12 → 3.2.15 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-1qwua3u
Aberto
Crítico
Plugin vulnerável: jet-engine 3.2.3.2 (CVE-2026-56068, CVE-2025-49938, CVE-2026-66581, CVE-2026-14864, CVE-2025-26870, CVE-2025-53196, CVE-2023-48762, CVE-2026-54189, CVE-2026-4352, CVE-2026-54187, CVE-2023-48758, CVE-2025-67923, CVE-2026-52706, CVE-2025-68495, CVE-2026-66613, CVE-2026-49084, CVE-2025-69333, CVE-2026-54188, CVE-2026-65467, CVE-2023-48761, CVE-2025-53194, CVE-2026-28134, CVE-2026-28082, CVE-2023-48757, CVE-2026-17019, CVE-2026-18202, CVE-2026-49075, CVE-2025-54688, CVE-2026-42774, CVE-2026-32355, CVE-2026-4662, CVE-2025-0369, CVE-2026-49074, CVE-2025-53195, CVE-2026-49076, CVE-2026-12360) em testerocha.com.br
Vulnerabilidade WP · conf. Alta · 20iwp-12y8hd4CVE-2026-56068CVE-2025-49938CVE-2026-66581CVE-2026-14864CVE-2025-26870CVE-2025-53196CVE-2023-48762CVE-2026-54189CVE-2026-4352CVE-2026-54187CVE-2023-48758CVE-2025-67923CVE-2026-52706CVE-2025-68495CVE-2026-66613CVE-2026-49084CVE-2025-69333CVE-2026-54188CVE-2026-65467CVE-2023-48761CVE-2025-53194CVE-2026-28134CVE-2026-28082CVE-2023-48757CVE-2026-17019CVE-2026-18202CVE-2026-49075CVE-2025-54688CVE-2026-42774CVE-2026-32355CVE-2026-4662CVE-2025-0369CVE-2026-49074CVE-2025-53195CVE-2026-49076CVE-2026-12360
Aberto
Crítico
Plugin vulnerável: post-smtp 2.5.9.1 (CVE-2024-13844, CVE-2024-5207, CVE-2026-2559, CVE-2025-0521, WF-3816a6cf-8157-4ad9-83f6-93c9b6c6275f, CVE-2026-3090, CVE-2025-11833, CVE-2025-12887, CVE-2025-9219, CVE-2025-22800, CVE-2023-6629, CVE-2023-7027, CVE-2026-48838, CVE-2023-6620, CVE-2024-13362, CVE-2025-24000, CVE-2023-6875, CVE-2023-5958, CVE-2024-52436) em testerocha.com.br
Vulnerabilidade WP · conf. Alta · 20iwp-1fufkveCVE-2024-13844CVE-2024-5207CVE-2026-2559CVE-2025-0521CVE-2026-3090CVE-2025-11833CVE-2025-12887CVE-2025-9219CVE-2025-22800CVE-2023-6629CVE-2023-7027CVE-2026-48838CVE-2023-6620CVE-2024-13362CVE-2025-24000CVE-2023-6875CVE-2023-5958CVE-2024-52436
Aberto
Médio
Plugin desatualizado: all-in-one-schemaorg-rich-snippets 1.7.8 → 1.7.9 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-ic9cv1
Aberto
Médio
Plugin desatualizado: wordfence 8.2.2 → 9.0.0 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-16jw05i
Aberto
Médio
Plugin desatualizado: wp-hide-security-enhancer 2.8.9 → 2.9.1 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-2ljffb
Aberto
Médio
Plugin desatualizado: wordpress-seo 28.2 → 28.3 (testerocha.com.br)
Vulnerabilidade WP · conf. Alta · 20iwp-12336we
Aberto
Médio
Core WordPress difere do checksum da 20i (21 arquivo(s)) em testerocha.com.br — provável drift de versão/idioma; o deep-scan confirma se é injeção
Integridade · conf. Alta · 20iwp-1iqmzgw
Aberto
Conectores do ativo
REST autenticadoAtivo
XML-RPC probeAtivo
SSH / WP-CLIIndisponível
Linha do tempo
Plugins · atualização via FTP (1 atualizado(s), 12 com erro)
agora
Remediação assistida
HTTPS não forçado (conexão insegura) em testerocha.com.br
Plugin vulnerável: all-in-one-wp-migration 7.106 (CVE-2026-17533, CVE-2026-19949) em testerocha.com.br
Plugin desatualizado: cookie-notice 3.1.4 → 3.1.9 (testerocha.com.br)
Plugin desatualizado: elementor 4.2.2 → 4.2.3 (testerocha.com.br)
Plugin vulnerável: elementor-pro 3.15.1 (CVE-2026-32475, CVE-2025-3076, CVE-2024-4107, CVE-2024-35656, CVE-2024-50555, CVE-2024-1364, CVE-2024-2781, CVE-2024-2121, CVE-2024-8494, CVE-2024-2120, CVE-2024-23523, CVE-2024-1521) em testerocha.com.br
Plugin vulnerável: gp-premium 2.3.1 (CVE-2024-3469, CVE-2026-66627) em testerocha.com.br
Plugin desatualizado: jeg-elementor-kit 3.2.12 → 3.2.15 (testerocha.com.br)
Plugin vulnerável: jet-engine 3.2.3.2 (CVE-2026-56068, CVE-2025-49938, CVE-2026-66581, CVE-2026-14864, CVE-2025-26870, CVE-2025-53196, CVE-2023-48762, CVE-2026-54189, CVE-2026-4352, CVE-2026-54187, CVE-2023-48758, CVE-2025-67923, CVE-2026-52706, CVE-2025-68495, CVE-2026-66613, CVE-2026-49084, CVE-2025-69333, CVE-2026-54188, CVE-2026-65467, CVE-2023-48761, CVE-2025-53194, CVE-2026-28134, CVE-2026-28082, CVE-2023-48757, CVE-2026-17019, CVE-2026-18202, CVE-2026-49075, CVE-2025-54688, CVE-2026-42774, CVE-2026-32355, CVE-2026-4662, CVE-2025-0369, CVE-2026-49074, CVE-2025-53195, CVE-2026-49076, CVE-2026-12360) em testerocha.com.br
Plugin vulnerável: post-smtp 2.5.9.1 (CVE-2024-13844, CVE-2024-5207, CVE-2026-2559, CVE-2025-0521, WF-3816a6cf-8157-4ad9-83f6-93c9b6c6275f, CVE-2026-3090, CVE-2025-11833, CVE-2025-12887, CVE-2025-9219, CVE-2025-22800, CVE-2023-6629, CVE-2023-7027, CVE-2026-48838, CVE-2023-6620, CVE-2024-13362, CVE-2025-24000, CVE-2023-6875, CVE-2023-5958, CVE-2024-52436) em testerocha.com.br
Plugin desatualizado: all-in-one-schemaorg-rich-snippets 1.7.8 → 1.7.9 (testerocha.com.br)
Plugin desatualizado: wordfence 8.2.2 → 9.0.0 (testerocha.com.br)
Plugin desatualizado: wp-hide-security-enhancer 2.8.9 → 2.9.1 (testerocha.com.br)
Plugin desatualizado: wordpress-seo 28.2 → 28.3 (testerocha.com.br)
Core WordPress difere do checksum da 20i (21 arquivo(s)) em testerocha.com.br — provável drift de versão/idioma; o deep-scan confirma se é injeção
Firewall
Carregando… (requer API no ar e o site na 20i).