Communication Security
Known CVE Vulnerability Check on Used Technologies
Detect exposed versions of technologies (PHP, server, CMS) that may contain known CVE vulnerabilities. Learn how to hide these versions to reduce your attack surface.
What this test checks
This test analyses your site's HTTP headers to identify versions of technologies used (PHP, web server, CMS). If a version is detected, it is compared against a database of known vulnerabilities (CVE). An outdated or vulnerable version can expose your site to automated attacks exploiting public flaws.
Our recommendation
Hide technology versions in HTTP headers by configuring your server (e.g., server_tokens off on Nginx, ServerTokens Prod on Apache). Keep all software up‑to‑date (PHP, server, CMS, plugins, themes) with the latest security patches. Use a vulnerability scanner to detect CVEs affecting your dependencies.
Security tests
Read more
Sensitive Files