I received a "Site vulnerabilities found" email. What should I do?

Why did I receive this email?

At Hodi, we use monitoring tools to help improve the security of the sites we host.

One of these tools, WP Toolkit, regularly scans your WordPress installation and compares the versions of WordPress, themes, and plugins against public vulnerability databases.

When a known vulnerability is detected, a notification is automatically sent to inform you. This is part of our commitment to providing secure hosting and helping you quickly address any potential risks.

This notification is informational: it does not mean your site has been compromised, but that an update is recommended to maintain an optimal level of security.

Has my site been hacked?

No.

This notification does not mean your site has been compromised.

It simply indicates that one or more components installed on your site have a known security vulnerability.

What should I do?

In most cases, it's enough to update the affected component (WordPress, theme, or plugin) to its latest version.

We also recommend removing any themes and plugins you no longer use, to reduce your site's attack surface.

How do I update using WP Toolkit?

1. Log in to your cPanel.
2. Open WordPress Management.
3. Click the site in question.
4. Click the Updates link at the bottom left.
5. If updates are available, you can apply them in a few clicks.
6. Once the update is complete, check that your site works as expected.

Is this urgent?

We recommend performing the updates as soon as possible.

Some vulnerabilities carry limited risk, while others can be exploited very quickly after they're disclosed. Keeping your site up to date is one of the best security practices.

Can I ignore this email?

We don't recommend it.

Even if your site is working correctly, a known vulnerability can be exploited by bots that crawl the internet looking for sites that haven't been updated.

Can I automate updates?

Yes.

From WordPress Management in cPanel, select your site and then open Automatic Update Settings.

There, you can choose to enable automatic updates for WordPress, themes, and/or plugins to reduce the risks associated with known vulnerabilities.

That said, we recommend regularly checking that your site is working properly, especially if you use custom-built themes or plugins.

Does Hodi update my WordPress site?

Hodi handles the maintenance and security of the hosting infrastructure (servers, operating system, and services).

However, updates to WordPress, themes, and plugins are part of your site's maintenance and remain your responsibility.

I need help. Who should I contact?

If you have questions about an update, aren't sure whether it's compatible with your site, or it causes a malfunction, we recommend contacting:

• the developer or agency that built your site;
• the developer of the plugin or theme in question, if the issue is specific to it.

These parties are best placed to advise you and handle your site's maintenance.

Updated on: 17/07/2026