https://toolkit-tests.pages.dev/wp/wp-gold.html
3 item(s) · 3 outdated · 0 abandoned · 2 vulnerable
3 audited3 outdated0 abandoned2 vulnerable
Plugins and themes this site exposes, checked against the WordPress.org directory for freshness and (with a WPScan token) known vulnerabilities. Only items that emit a front-end asset are visible from outside — a floor, not the full installed list. Verdict = the worst item.
| Item | Installed | Latest | Updated | Assessment |
|---|---|---|---|---|
| contact-form-7plugin | 5.9.2 | 6.1.7 | 2026-08-17 | outdated: 5.9.2 → 6.1.7 (major) · 2 known vulnerabilities — fixed in 6.0.6 |
| wordpress-seoplugin | 22.0 | 28.4 | 2026-09-01 | outdated: 22.0 → 28.4 (major) · 6 known vulnerabilities — fixed in 28.1 |
| twentytwentyfourtheme | 1.1 | 1.6 | 2026-08-19 | outdated: 1.1 → 1.6 (minor) |
wiki disabled (--no-wiki)
WP plugins & theme · wp-plugins-and-theme
verdict: FAIL 3 item(s) · 3 outdated · 0 abandoned · 2 vulnerable
url: https://toolkit-tests.pages.dev/wp/wp-gold.html captured: 2026-09-06T04:09:08.155Z
vuln check: on (WPScan)
ITEMS AUDITED — 3
[FAIL] contact-form-7 (plugin)
installed: 5.9.2 → latest: 6.1.7 (major)
updated: 2026-08-17 (~1 months ago)
tested up to WP 7.1
VULN: 2 known — fixed in 6.0.6 — Contact Form 7 < 5.9.5 - Unauthenticated Open Redirect; Contact Form 7 < 6.0.6 - Order Replay Vulnerability
- outdated: 5.9.2 → 6.1.7 (major)
- 2 known vulnerabilities — fixed in 6.0.6
[FAIL] wordpress-seo (plugin)
installed: 22.0 → latest: 28.4 (major)
updated: 2026-09-01 (~0 months ago)
tested up to WP 7.1
VULN: 6 known — fixed in 28.1 — Yoast SEO < 22.6 - Reflected Cross-Site Scripting; Yoast SEO < 22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting; Yoast SEO < 26.9 - Contributor+ Stored XSS
- outdated: 22.0 → 28.4 (major)
- 6 known vulnerabilities — fixed in 28.1
[REVIEW] twentytwentyfour (theme)
installed: 1.1 → latest: 1.6 (minor)
updated: 2026-08-19 (~1 months ago)
- outdated: 1.1 → 1.6 (minor)
PLUGIN PLAYBOOK
wiki disabled (--no-wiki)