This test fails when WordPress core is behind the latest available release. Outdated core often includes known, publicly documented vulnerabilities.
To update:
- Back up the site.
- Go to Dashboard → Updates.
- Update WordPress core when an update is listed.
For minor security releases, many sites enable automatic updates. See Auto core updates.
Hiding the WordPress version (Hide WP Version) does not replace keeping core updated.