wp2shell: more than a month later. Confirm 6.8.6, 6.9.5, 7.0.2. Patched is not clean.

Read the advisory

Security tests

Fixes (one-click hardening)

Use the Security Ninja Fixes page to toggle common WordPress hardening options.

Security Ninja → Fixes (Pro) turns common hardening options on or off without editing wp-config.php by hand, for example disabling the plugin/theme editor, adjusting debug-related exposure, and other hardening toggles shown on that screen.

Fixes page overview with hardening toggles

Free users still get guidance on failing security tests; many one-click applies require Pro.

Related fix docs live under Security Fixes (headers, hide version, remove unwanted files, and more).

Still stuck? Get help or contact us.

Larger screenshot