Security Ninja can email you when the vulnerability scanner finds known issues in plugins, themes, or WordPress core. This helps if you do not open wp-admin every day.
What the email includes
When findings exist and email warnings are enabled, Security Ninja sends a message to the recipients you set. The mail lists affected software and guidance so you can update or replace it.
Sample shape of the alert:
Subject: Security Ninja Vulnerability Alert
You are receiving this email because you have activated email warnings for the vulnerability scanner in your Security Ninja settings.
Security Ninja has detected vulnerabilities on your website…
Plugin: … (CVE details and short description)
View all vulnerabilities: link in the email
Exact wording can change with product updates. Treat this as an example, not a fixed template.
How the email system behaves
- Finished scan first: Scheduled warning emails wait until a vulnerability scan has stored fresh results. If a scan is already running, the email is retried a few minutes later instead of using a stale cache.
- Current installs only: Plugins and themes that were removed, or that you already updated past the vulnerable version, are left out of the email.
- Same findings, 24 hours: The same set of CVEs is not emailed again within 24 hours. A new distinct set can send another email the same day.
- Multiple recipients: Separate email addresses with commas in the recipient field.
Configure email alerts
- Go to Security Ninja → Vulnerabilities.
- Keep Vulnerability scanning enabled.
- Enable Email warnings.
- Enter one or more addresses under Email recipient, separated by commas.
- Click Save Changes.
After you get an alert
- Update the affected plugin, theme, or WordPress when a fix is available.
- If there is no update, replace the software or follow the guidance in the Vulnerabilities tab.
- Keep monitoring with scheduled scans if you use Pro.
