Theme risk. A vulnerable plugin can be fixed with an update or switched off. A theme in use is not something you simply switch off. That is why Verploy now looks separately at the active theme and, for a child theme, its parent theme. The sites overview shows a label when that theme has a vulnerability without a fix, or when the fix does not arrive through a normal update. The Theme risk filter shows those sites together. If a custom theme happens to share its folder name with a known vulnerable theme, it says “check” instead of reporting a vulnerability.
We use one Google Ads cookie to see which ads lead to sign-ups. Nothing else is tracked with cookies. Privacy