You are reporting the paste WordPress security testing: webapp testing of whole sites, source code testing of plugins and themes..