What is Vulnerability Monitor?

Vulnerability Monitor is a WordPress feature which helps you protect your site against cyber threats. By notifying you about detected vulnerabilities in your WordPress core, themes and plugins, it allows you to act quickly and fix them before your site and business get compromised.

The Lite version of Vulnerability Monitor is included in all our hosting plans as part of the one.com plugin

Protect your website with Managed WP

Make your WordPress website safer with automatic updates of WordPress core, themes and plugins. Get Vulnerability Monitor Pro and many other features with our Managed WP add-on.


Why should I use Vulnerability Monitor?

Vulnerabilities are issues in the code of WordPress core, themes and plugins which hackers could exploit. In the worst case, a vulnerability could allow a hacker to upload malware into your website, or even access it. This could compromise your customers' data and harm your business.

Once found, a vulnerability is usually fixed with an update which you can download and install.

Our Vulnerability Monitor helps you find out about vulnerabilities on your website and fix them quickly: it detects them by comparing your website to an extensive database of known vulnerabilities, and sends you an email report on the found issues, including their risk level and suggested fix versions.


What's the difference between Lite and Pro versions?

The Lite version of Vulnerability Monitor is part of the one.com plugin, which is included in all our hosting plans. This version detects vulnerabilities on your WordPress site and notifies you about them by email.

Our Managed WP add-on includes a Pro version of the Vulnerability Monitor, which enhances security even more by updating detected vulnerable elements automatically. 


How do I manage the settings?

Vulnerability Monitor settings can be managed in WP Admin. You can find them in the Health Monitor section of the one.com plugin.

  1. Log in to WP Admin and click the one.com plugin in the left-hand menu.
  2. Click Health and SecurityHealth Monitor.
  3. Choose the Vulnerabilities tab. On this page, you can see the list of current vulnerabilities on your website.
  4. Click Settings.
Screenshot of the Health Monitor section in WP Admin.

You can manage the following settings:

  • Automatic updates (Managed WP only)- If this toggle is activated, detected vulnerabilities are fixed automatically with updates, if such updates are available.
  • Email notifications - Turn these on or off by clicking the toggle.
  • Email notification recipients - Check Administrator email if you want to receive these notifications to your WP Admin email. You can also add other recipients by writing their email addresses to the Notify others via email field.
  • Notification preferences - Choose whether you want to be notified about detected vulnerabilities. If you have Managed WP and have turned on automatic updates for vulnerabilities, you can also receive notifications about them.
Screenshot of the Vulnerability Monitor settings in WP Admin.

Related articles:

Was this article helpful?

Can’t find what you are looking for?

Start a chat

It's the quickest way to get in touch, every day of the year.

Give us a call

Available on weekdays from 10am to 2pm (UTC).