WordPress security issues

  • Unknown's avatar
    josephwordp · Member ·

    I would have liked to post pictures here but it won’t let me. I apologize for the wall of text that I have to do.

    I need help resolving these issues. I am fairly new to making a website, so the technical pages I found weren’t really making sense to me. Please help anyway you can with these issues.

    1) The REST API encountered an error: The REST API is one way WordPress, and other applications, communicate with the server. One example is the block editor screen, which relies on this to display, and save, your posts and pages.

    The REST API request failed due to an error.
    Error: [] cURL error 7: couldn’t connect to host

    2) Could not reach wordpress.org: Communicating with the WordPress servers is used to check for new versions, and to both install and update WordPress core, themes or plugins.

    Error Your site is unable to reach WordPress.org at 198.143.164.251, and returned the error: cURL error 7: couldn’t connect to host

    3) Background updates are not working as expected: Background updates ensure that WordPress can auto-update if a security update is released for the version you are currently using.

    Error The WP_AUTO_UPDATE_CORE constant is defined and enabled.
    Passed Could not confirm that the wp_version_check() filter is available.
    Passed No version control systems were detected.
    Passed Your installation of WordPress doesn’t require FTP credentials to perform updates.
    Passed Couldn’t retrieve a list of the checksums for WordPress 5.3.2. This could mean that connections are failing to WordPress.org.
    Error WordPress security and maintenance releases are blocked by define( ‘WP_AUTO_UPDATE_CORE’, false );

    4) Your site could not complete a loopback request: Loopback requests are used to run scheduled events, and are also used by the built-in editors for themes and plugins to verify code stability.

    The loopback request to your site failed, this means features relying on them are not currently working as expected.
    Error: [] cURL error 7: couldn’t connect to host

    5) Your version of PHP (5.6.33-1~dotdeb+7.1) is out of date: PHP is the programming language used to build and maintain WordPress. Newer versions of PHP are faster and more secure, so staying up to date will help your site’s overall performance and security. The minimum recommended version of PHP is 7.3.

    6) Outdated SQL Server: The SQL server is a required piece of software for the database WordPress uses to store all your site’s content and settings.

    For optimal performance and security reasons, we recommend running MySQL version 5.6 or higher. Contact your web hosting company to correct this.

    7) A scheduled event has failed: The scheduled event, wp_privacy_delete_old_export_files, failed to run. Your site still works, but this may indicate that scheduling posts or automated updates may not work as intended

    Please help. Thank you so much

  • staff-blorbo · Staff ·

    I don’t see any sites under your account here.

    What is the URL of the site with the problem?

  • Unknown's avatar
    josephwordp · Member ·

    Ahh I was able to find it out. Seems all of those issues were out of my hands. I contacted the server host and they resolved all of the problems. Allowing connections etc etc.

    When googling for help on those issues. There is alot of technical stuff for fixing it, but nobody saying just “contact your website host or hosting provider first”

    Its tough for a first time website owner. I wish the SiteHealth tool was better at communicating actual ways to fix the issues it says that you have.

    Thanks for getting in touch with me.

  • staff-mckluskey · Staff ·

    Thanks for letting us know, for the future, on these forums we can only help with WordPress.com hosted sites.

    Because WordPress.com and WordPress.org are two entirely separate entities, we cannot access files or data for sites that are hosted elsewhere, so WordPress.com staff can only assist with sites that are hosted on our servers. You can read more about the differences between WordPress.org software and WordPress.com here:

    WordPress.com vs. WordPress.org

    You can look for help at the community forums here: https://wordpress.org/support/forums/

    http://wordpress.org/support/ is also a great resource for sites using the open-source WordPress.org software.

  • The topic ‘WordPress security issues’ is closed to new replies.