Improved WordPress information

A common misconfiguration for WordPress sites is to expose the names of users. We now display the actual user list in the UpGuard platform when this risk is detected.

Additionally, we now explicitly check for old versions of WordPress that have known vulnerabilities that can be exploited.

Other improvements and fixes

• You can now retrieve the current set of risks from a vendor via our API.
• Risks are now prepopulated when you request remediation through the Portfolio Risk Profile.
• Questionnaire due dates can now be changed. If you want to change a questionnaire’s due date, click on the questionnaire, click the “actions” button, and then click “Set due date”.
• You can now export to PDF and Excel in more places.
• When you have filters active and export data to PDF, the PDF that is generated will now display the filters you used.
• The check for certificates that are about to expire now triggers when a certificate is within 20 days of expiring, rather than 30. This change is designed to reduce the number of false positives as some popular certificates (like LetsEncrypt) can be set to automatically renew when there are less than 30 days to expiry.