skibidi
New Pleskian
- Server operating system version
- Ubuntu 24.04 x86_64
- Plesk version and microupdate number
- 18.0.80.6
According to this Plesk KB article the Security-Risk score in WP-Toolkit should be hidden with:
But this setting does not appear to work in the (current) WP-Toolkit 6.11.2-10791 version, the Security-Risk score is still visible.
I'd like to hide it bc the "Security-Risk" rating can be misleading. As I understand it, the score represents the severity of known vulnerabilities in WP core, plugins and themes. It does not indicate whether a WP installation is compromised or whether its files have been tampered with.
We already had some cases where customers referred to a 0.0 rating as evidence that recurring malicious files could not originate from their WP installation. Ofc, a 0.0 vulnerability risk score does not mean the installation itself is clean or uncompromised.
Is "securityRiskFeature = false" still supported, or is there currently another way to hide this rating while keeping vulnerability detection enabled?
Thanks.
Code:
[ext-wp-toolkit]
securityRiskFeature = false
But this setting does not appear to work in the (current) WP-Toolkit 6.11.2-10791 version, the Security-Risk score is still visible.
I'd like to hide it bc the "Security-Risk" rating can be misleading. As I understand it, the score represents the severity of known vulnerabilities in WP core, plugins and themes. It does not indicate whether a WP installation is compromised or whether its files have been tampered with.
We already had some cases where customers referred to a 0.0 rating as evidence that recurring malicious files could not originate from their WP installation. Ofc, a 0.0 vulnerability risk score does not mean the installation itself is clean or uncompromised.
Is "securityRiskFeature = false" still supported, or is there currently another way to hide this rating while keeping vulnerability detection enabled?
Thanks.