Security Issues keep re-emerging

It keeps saying “X security issues detected” but when I click through to see details, there are all green ticks. I’ve noticed that when I click on ‘Fix All’, the alert goes away but it seems to come back after some time.

Hi @venks,

Can you please post the community system report from your MainWP Dashboard for review? The report is located in your Dashboard under Status → Server, on the top right of the page.

Be sure to use the button like the one below; this button hides all your private information:

image

Pressing the button auto-copies the report to your clipboard then just paste it in a reply here.

Here you go:


### Server Info                    Required                                               Detected                                     Status   ###

MainWP Dashboard                   
MainWP Dashboard Version           4.1.6                                                  4.1.6                                        Pass        
MainWP Upload Directory            Writable                                               Writable                                     Pass        
MainWP Extensions                  
Activity Log for MainWP            1.7.0                                                                                                           
MainWP Bulk Settings Manager Extension4.0.2.1                                                API License Inactive                         Warning     
MainWP Client Reports Extension    4.0.8                                                  API License Active                           Pass        
MainWP Page Speed Extension        4.0.1.1                                                API License Active                           Pass        
WordPress                          
WordPress Version                  >=3.6                                                  5.7.1                                        Pass        
WordPress Memory Limit             >=64M                                                  128M                                         Pass        
MultiSite Disabled                 =true                                                  true                                         Pass        
FileSystem Method                  = direct                                               direct                                       Pass        
PHP                                
PHP Version                        >=5.6                                                  7.4.18                                       Pass        
PHP Safe Mode Disabled             =true                                                  true                                         Pass        
PHP Max Execution Time             >=30 seconds                                           178                                          Pass        
PHP Max Input Time                 >=30 seconds                                           60                                           Pass        
PHP Memory Limit                   >=128M                                                 128M                                         Pass        
PCRE Backtracking Limit            >=10000                                                1000000                                      Pass        
PHP Upload Max Filesize            >=2M                                                   300M                                         Pass        
PHP Post Max Size                  >=2M                                                   300M                                         Pass        
SSL Extension Enabled              =true                                                  true                                         Pass        
SSL Warnings                       = empty                                                                                             Pass        
cURL Extension Enabled             =true                                                  true                                         Pass        
cURL Timeout                       >=300 seconds                                          60                                           Warning     
cURL Version                       >=7.18.1                                               7.68.0                                       Pass        
cURL SSL Version                   >=OpenSSL/0.9.8l                                       OpenSSL/1.1.1f                               Pass        
PHP Allow URL fopen                YES                                                    
PHP Exif Support                   YES ( V7.4.)                                           
PHP IPTC Support                   YES                                                    
PHP XML Support                    YES                                                    
PHP Disabled Functions             disk_free_space, diskfreespace, dl, exec, fpassthru, getmypid, getmyuid, highlight_file, ignore_user_abort, link, opcache_compile_file, opcache_get_configuration, opcache_is_script_cached, passthru, pcntl_alarm, pcntl_exec, pcntl_fork, pcntl_get_last_error, pcntl_getpriority, pcntl_setpriority, pcntl_signal, pcntl_signal_dispatch, pcntl_sigprocmask, pcntl_sigtimedwait, pcntl_sigwaitinfo, pcntl_strerror, pcntl_wait, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifcontinued, pcntl_wifexited, pcntl_wifsignaled, pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig, php_uname, phpinfo, popen, posix_ctermid, posix_getcwd, posix_getegid, posix_geteuid, posix_getgid, posix_getgrgid, posix_getgrnam, posix_getgroups, posix_getlogin, posix_getpgid, posix_getpgrp, posix_getpid, posix_getppid, posix_getpwnam, posix_getpwuid, posix_getrlimit, posix_getsid, posix_getuid, posix_isatty, posix_kill, posix_mkfifo, posix_setegid, posix_seteuid, posix_setgid, posix_setpgid, posix_setsid, posix_setuid, posix_times, posix_ttyname, posix_uname, proc_close, proc_get_status, proc_nice, proc_open, proc_terminate, shell_exec, show_source, socket_listen, source, system, virtual,
PHP Loaded Extensions              Core, FFI, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, bcmath, calendar, cgi-fcgi, ctype, curl, date, dom, exif, fcptools, fileinfo, filter, ftp, gd, gettext, hash, iconv, imagick, imap, json, ldap, libxml, mbstring, memcache, mysqli, mysqlnd, newrelic, openssl, pcre, pdo_mysql, posix, readline, session, shmop, soap, sockets, sodium, standard, sysvmsg, sysvsem, sysvshm, tokenizer, xml, xmlreader, xmlwriter, xsl, zip, zlib
MySQL                              
MySQL Version                      >=5.0                                                  5.7.33-google                                Pass        
MySQL Mode                         ALLOW_INVALID_DATES                                    
MySQL Client Encoding              utf8                                                   
Server Info                        
Server Software                    Flywheel/5.1.0                                         
Operating System                   Linux                                                  
Architecture                       64		 bit                                               
Server Protocol                    HTTP/1.0                                               
HTTPS                              ON                                                     
Server self connect                Not expected HTTP response body:                       
User Agent                         Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36
Gateway Interface                  CGI/1.1                                                
Memory Usage                       5.67 MB                                                
Request Time                       1620784136                                             
Accept Content                     text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Charset Content             N/A                                                    
MainWP Settings                    
Number Of Child Sites              6                                                      
Use WP-Cron                        Yes                                                    
Optimize for Shared Hosting or Big NetworksNo                                                     
Automatic Daily Update             Install trusted updates                                
Abandoned Plugins/Themes Tolerance 365                                                    
Maximum number of posts to return                                                         
Maximum number of pages to return                                                         
Primary Backup System              Default MainWP Backups                                 
Maximum simultaneous requests      4                                                      
Minimum delay between requests     200                                                    
Maximum simultaneous requests per ip1                                                      
Minimum delay between requests to the same ip1000                                                   
Maximum simultaneous sync requests                                                        
Minimum simultaneous install/update requests                                                       
Active Plugins                     
Activity Log for MainWP            1.7.0                                                  Active                                       
Google Pagespeed Insights          4.0.3                                                  Active                                       
MainWP Dashboard                   4.1.6                                                  Active                                       
MainWP Key Maker                   1.2                                                    Active                                       

Hi @venks,

Are you able to check the MainWP 4.1.7 Beta version and see if resolves the problem? It contains some relevant updates that I think could help.

I have uploaded 4.1.7 now. Will check it after some time to see if the issue comes back.

1 Like

Hi @venks,

Ok, thanks. Let us know how it goes.

1 Like

The issue seems to have been resolved with the upgrade. Thanks Bogdan.

Thanks for verifying that!

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.