內容簡介
Elevoire Security Audit 是一款專為 WordPress 設計的安全審核外掛，能夠掃描網站的安全配置、過時軟體及危險設定，並提供詳細的解釋與修正建議，幫助用戶提升網站安全性。
【主要功能】
• 掃描 WordPress 核心版本及除錯模式
• 檢查過時及不活躍的外掛與佈景主題
• 提供安全分數及嚴重性分類
• 儲存掃描報告以便後續比較
• 詳細報告包含狀態、風險解釋及建議修正
外掛標籤
開發者團隊
原文外掛簡介
Elevoire Security Audit is a production-ready, read-only WordPress security auditing plugin. It scans your site for security misconfigurations, outdated software, and dangerous settings — then explains what each issue means and how to fix it.
The plugin NEVER:
* Modifies your site or its settings
* Acts as a firewall or removes malware
* Sends any data to external servers
* Collects analytics or user information
Its only job is to audit, analyse, and educate.
What it scans
WordPress Core version and debug mode
File editing and SSL admin settings
Version exposure and exposed default files
XML-RPC and WP-Cron configuration
User accounts and the default “admin” username
Login page HTTPS and Application Passwords
Outdated and inactive plugins and themes
File permissions (wp-config.php, .htaccess, uploads)
PHP version and dangerous PHP settings
HTTP Security Headers (CSP, HSTS, X-Frame-Options, etc.)
SSL/HTTPS certificate status
Database prefix and autoloaded options size
Security Score
Every scan produces an overall Security Score (0–100) with a breakdown by severity: Critical, High, Medium, Low, and Passed checks.
Detailed Findings
Each finding includes:
* Status and severity
* What was found
* Why it matters (risk explanation)
* Recommended fix
Reports
Stores all scan reports in your database so you can compare security posture over time. You can view or delete any report at any time from the Reports page.
