CMS with critical known vulnerabilities

A CVE (Common Vulnerability and Exposure) is a publicly documented security flaw. Critical CVEs in your content management system (CMS) or its plugins mean attackers have a known, published method to compromise sites running that version. Attackers actively scan the internet for sites running vulnerable versions — often within hours of a CVE being published. A successful attack can result in your site being defaced, used to serve malware, or customer data being stolen. Update your CMS and all plugins to their latest versions immediately. Enable automatic security updates where possible, and remove any plugins you no longer use.