CMS ADMINS Security Check Report

The CMS ADMINS Security Check Report plugin performs a comprehensive series of security checks on your WordPress site. It evaluates different aspects of security using a weighted scoring system and provides clear recommendations for improvements.

Key Features:

• 45 Security Tests covering all critical aspects of WordPress security
• Weighted A-F Risk Grading – Critical issues have higher impact on your score
• Category-Based Scoring – Tests grouped into Critical, High, Medium, and Low categories
• Real-Time Progress – Watch tests run with live percentage updates
• Searchable Documentation – Find specific test information instantly
• Dark Mode Support – Automatic theme detection
• Fully Accessible – WCAG 2.1 AA compliant with keyboard navigation
• Copy Report – One-click export of results for sharing

Security Tests Include:

• WordPress and PHP version checks
• wp-config.php file permissions and security keys
• File and directory permissions audit
• Debug mode and error logging detection
• Weak password and admin username checks
• Plugin and theme update status
• XML-RPC and REST API exposure
• SSL/HTTPS configuration
• Server security headers analysis
• Malware signature scanning
• Database prefix and user privileges
• Brute-force and login protection detection
• User enumeration protection
• And many more…

Risk Grading System:

Grade
Risk Level
Description

A
Excellent
Very well protected

B
Good
Good protection with minor improvements possible

C
Moderate
Several improvements recommended

D
Poor
Significant security risks detected

F
Critical
Immediate action required

Disclaimer:

Please note that CMS ADMINS does not take any responsibility for any damages to the system/server and does not guarantee the accuracy of the results. Users are advised to take appropriate precautions and backup their site before making any changes based on the plugin’s recommendations.

License & Credits

This plugin is free software and is released under the GPLv2 or later.

Developed by Patrick Schlesinger / CMS ADMINS
Website: https://www.cms-admins.de/

Third-Party Services

This plugin uses the following third-party services:

1. WordPress.org API
   • Purpose: Used to fetch the latest version of WordPress, plugins, themes, security keys, and core file checksums.
   • Service URLs:
     • WordPress Version Check
     • Plugin Info
     • Theme Info
     • Security Keys and Salts
     • Core Checksums
   • Privacy Policy: WordPress.org Privacy Policy
   • Terms of Use: WordPress.org Terms of Service