Vulnerability checker finds ghost staging sites

Hi,
The vulnerability checker finds ghost staging sites, i.e. staging sites of production sites I’ve deleted from my MainWP dashboard long time ago, as well as nonexistent staging sites of production sites still managed from my dashboard.
How can I get rid of those ghost entries?
Looking forward to learn,
Lukas


### WordPress Check                Required                                               Detected                                     Status   ###

FileSystem Method                  = direct                                               direct                                       Pass        
MultiSite Disabled                 =true                                                  true                                         Pass        
WordPress Memory Limit             >=64M                                                  1024M                                        Pass        
WordPress Version                  >=6.2                                                  6.7                                          Pass        

### PHP                            Required                                               Detected                                     Status   ###

cURL Extension Enabled             =true                                                  true                                         Pass        
cURL Timeout                       >=300 seconds                                          60                                           Warning     
cURL Version                       >=7.29.0                                               8.10.1                                       Pass        
Function `tmpfile` enabled         N/A                                                    Enabled                                      Pass        
OpenSSL Version                    >=OpenSSL/1.1.0                                        OpenSSL/1.1.1w                               Pass        
OpenSSL Working Status             Yes                                                    Yes                                          Pass        
PCRE Backtracking Limit            >=10000                                                1000000                                      Pass        
PHP Allow URL fopen                N/A                                                    YES                                                      
PHP Disabled Functions             N/A                                                    No functions disabled.                                   
PHP Exif Support                   N/A                                                    YES                                                      
PHP IPTC Support                   N/A                                                    YES                                                      
PHP Loaded Extensions              N/A                                                    Core, OAuth, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, apcu, bcmath, bz2, calendar, cgi-fcgi, ctype, curl, date, dba, dom, exif, fileinfo, filter, ftp, gd, gettext, gmp, gnupg, grpc, hash, iconv, imagick, imap, intl, json, ldap, libxml, mailparse, mbstring, mcrypt, memcache, memcached, mongodb, mysqli, mysqlnd, odbc, openssl, pcntl, pcre, pdo_dblib, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql, posix, pspell, readline, redis, scrypt, session, snmp, soap, sockets, sodium, solr, sqlite3, ssh2, standard, sysvmsg, sysvsem, sysvshm, tidy, tokenizer, xml, xmlreader, xmlrpc, xmlwriter, xsl, yaml, zip, zlib            
PHP Max Execution Time             >=30 seconds                                           300                                          Pass        
PHP Max Input Time                 >=30 seconds                                           300                                          Pass        
PHP Memory Limit                   >=256M                                                 1024M                                        Pass        
PHP Post Max Size                  >=2M                                                   128M                                         Pass        
PHP Safe Mode Disabled             =true                                                  true                                         Pass        
PHP Session enabled                N/A                                                    Enabled                                      Pass        
PHP Upload Max Filesize            >=2M                                                   128M                                         Pass        
PHP Version                        >=7.4                                                  8.1.30                                       Pass        
PHP XML Support                    N/A                                                    YES                                                      
SSL Extension Enabled              =true                                                  true                                         Pass        
SSL Warnings                       = empty                                                                                             Pass        

### MySQL                          Required                                               Detected                                     Status   ###

MySQL Client Encoding              N/A                                                    utf8mb4                                                  
MySQL Mode                         N/A                                                    ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION            
MySQL Version                      >=5.0                                                  10.6.19-MariaDB-log                          Pass        

### Server Configuration           Detected Value                                      ###

Accept Content                     text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Charset Content             N/A                                                    
Architecture                       64         bit                                         
Gateway Interface                  CGI/1.1                                                
HTTPS                              ON                                                     
Memory Usage                       96.12 MB                                               
Operating System                   FreeBSD                                                
Request Time                       1732221402                                             
Server Protocol                    HTTP/2.0                                               
Server self connect                Not expected HTTP response body:                       
Server Software                    Apache                                                 
User Agent                         Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox/132.0

### MainWP Dashboard Settings      Detected Value                                      ###

Abandoned plugins/themes tolerance 365                                                    
Basic uptime monitoring enabled    No                                                     
MainWP Dashboard Version           Latest: 5.2.2 | Detected: 5.2.2 Pass                   
MainWP legacy backups enabled      No                                                     
Maximum number of pages to return                                                         
Maximum number of posts to return                                                         
Maximum simultaneous install and update requests3                                                      
Maximum simultaneous requests      4                                                      
Maximum simultaneous requests per ip1                                                      
Maximum simultaneous sync requests 8                                                      
Minimum delay between requests     200                                                    
Minimum delay between requests to the same ip1000                                                   
Number of connected sites          66                                                     
Optimize data loading              Yes                                                    
Plugin advanced automatic updates enabledNo                                                     
Primary Backup System              MainWP WP Time Capsule Extension                       
REST API enabled                   No                                                     
Site health monitoring enabled     No                                                     
Theme advanced automatic updates enabledNo                                                     
Use WP Cron                        Yes                                                    
WP Core advanced automatic updates enabledNo                                                     

### Extensions                     Version                                                License                                      Status   ###

Activity Log for MainWP            2.1.3                                                                                                           
Advanced Uptime Monitor Extension  5.3.1                                                  Active                                       Pass        
Dashboard Lock                     5.0.1                                                  Active                                       Pass        
MainWP Client Reports Extension    4.0.14                                                 Active                                       Pass        
MainWP Code Snippets Extension     5.0.3                                                  Active                                       Pass        
MainWP Custom Dashboard Extension  5.0.1                                                  Active                                       Pass        
MainWP Favorites Extension         5.0.1                                                  Active                                       Pass        
MainWP File Uploader Extension     5.0.1                                                  Active                                       Pass        
MainWP iThemes Security Extension  5.0.1                                                  Active                                       Pass        
MainWP Lighthouse Extension        5.0.2                                                  Active                                       Pass        
MainWP Maintenance Extension       5.0                                                    Active                                       Pass        
MainWP Page Speed Extension        4.0.3                                                  Active                                       Pass        
MainWP Pro Reports Extension       5.0.5                                                  Active                                       Pass        
MainWP Rocket Extension            5.0.1                                                  Active                                       Pass        
MainWP Staging Extension           5.0.3                                                  Active                                       Pass        
MainWP Sucuri Extension            5.0                                                    Active                                       Pass        
MainWP Team Control                5.0.1                                                  Active                                       Pass        
MainWP Time Capsule Extension      5.0.1                                                  Active                                       Pass        
MainWP UpdraftPlus Extension       5.0.1                                                  Active                                       Pass        
MainWP Vulnerability Checker Extension5.0.1                                                  Active                                       Pass        
MainWP White Label Extension       5.0                                                    Active                                       Pass        
MainWP Wordfence Extension         5.0.1                                                  Active                                       Pass        

### Plugin                         Version                                                Status                                    ###

Activity Log for MainWP            2.1.3                                                  Active                                       
Backup and Staging by WP Time Capsule1.22.23                                                Active                                       
Easy Updates Manager               9.0.19                                                 Active                                       
hCaptcha for WP                    4.7.1                                                  Active                                       
MainWP Child                       5.2                                                    Inactive                                     
MainWP Client Reports Extension    4.0.14                                                 Active                                       
MainWP Dashboard                   5.2.2                                                  Active                                       
MainWP Page Speed Extension        4.0.3                                                  Active                                       
My Database Admin                  1.1.24                                                 Active                                       
Solid Security Pro                 8.5.1                                                  Active                                       
UpdraftPlus - Backup/Restore       1.24.11                                                Active                                       
WP Crontrol                        1.17.0                                                 Active                                       
WP STAGING WordPress Backup Plugin - Backup Duplicator & Migration3.9.2                                                  Active                                       
WP-Cron Status Checker             1.2.5                                                  Active                                       
WPCodeBox                          1.4.1                                                  Active                                       

Hey @lhberg

Do you see these ghost entries in the Vulnerability Checker table (wp-admin/admin.php?page=Extensions-Mainwp-Vulnerability-Checker-Extension), and/or are you getting Vulnerability email notifications about them?

Can you navigate to the Updates page, select Staging sites from the dropdown, and see if the Dashboard is reporting available updates for any of the ghost staging sites?

Hi Bojan,
thanks for your reply.
I don’t get email notifications but see them in the table.
There are no staging sites listed in the updates dashboard.
Best,
Lukas

1 Like

Thanks for the update.

Would you mind opening a private Help Desk ticket so we can collect some additional information & investigate further?

And please refer to this Managers thread by its URL in the ticket.

Thanks Bojan,
done.
Best,
Lukas

1 Like