What it is

A plugin on your site has a publicly known security vulnerability (CVE) and its developer has not released a fixed version — the newest release is still affected. Updating will not solve it, and while the plugin stays active attackers can exploit it (some of these allow taking over the site without logging in).

How to fix it

Click "Deactivate" on this row to switch the plugin off right away (nothing is deleted, you can turn it back on later). Then replace it with an actively maintained alternative — see the Plugins & Themes tab — or remove it if you no longer need it.