---
title: "How to Resolve Site Health Security Issues"
description: "WordPress 5.2 release's new Site Health feature finds free ways to enhance website security and performance. Improving security doesn't require extensive reading and configuration. Sometimes, it's as..."
url: https://www.inmotionhosting.com/support/security/resolve-site-health-security-issues/
date: 2019-06-11
modified: 2021-08-16
author: "InMotion Hosting Contributor"
categories: ["Security"]
type: post
lang: en
---

# How to Resolve Site Health Security Issues

[WordPress 5.2 release](https://www.inmotionhosting.com/support/edu/wordpress/wp-releases/wordpress-5-2-release-announcement/)‘s new [Site Health feature](https://www.inmotionhosting.com/support/edu/wordpress/wordpress-site-health/) finds *free* ways to enhance website security and performance. Improving security doesn’t require extensive reading and configuration. Sometimes, it’s as simple as minimalism and removing what you don’t need.

*Psst!* Want more speed with no complexity? Check out our Nginx-powered [WordPress Hosting](https://www.inmotionhosting.com/wordpress-hosting) with our user-friendly [Cache Manager](https://www.inmotionhosting.com/support/edu/cpanel/cache-manager-cpanel/).

Below we cover **how to resolve Site Health security issues**.

## Security Checks

### Inactive Plugins

Every additional file – *plugin, theme, etc.* – is another potential vulnerability. If you no longer need a plugin, fix any issues caused when that plugin is inactivated – *e.g. shortcodes and visual errors* – and remove the plugin via your WordPress dashboard, [WP-CLI](https://www.inmotionhosting.com/support/edu/wordpress/wp-cli/manage-wordpress-plugins-wp-cli/), or [cPanel File Manager/FTP](https://www.inmotionhosting.com/support/edu/wordpress/troubleshooting-wordpress-plugins/).

*Click the arrow to the right of the notice for more info.*

**Want more?** Use plugins that handle multiple functions such as the [Wordfence security suite plugin](https://www.inmotionhosting.com/support/edu/wordpress/plugins/wordfence/).

### Inactive Themes

Everything above regarding plugins applies to themes. Remove inactive themes via the dashboard, [WP-CLI](https://developer.wordpress.org/cli/commands/theme/delete/), or [the theme folder](/support/website/how-to-delete-a-file/) from the *wp-content/themes* directory.

**Want more?** You can contact theme developer(s) using the **Theme Homepage** link from their respective *WordPress.org/themes* page.

### HTTPS Connection

Forcing your website to use HTTPS with a [paid or free SSL certificate](https://www.inmotionhosting.com/support/website/ssl/auto-ssl-guide/) ensures a secure connection between the website and visitors. An [SSL certificate](/support/website/ssl/what-is-ssl-and-why-is-it-important/) is essential for any company that understands [why security is important](/support/security/why-security-is-important-for-small-businesses/).

**Want more?** Force your website to use HTTPS [with the dashboard](https://www.inmotionhosting.com/support/edu/wordpress/wordpress-ssl/) or
[Really Simple SSL plugin](https://www.inmotionhosting.com/support/edu/wordpress/how-to-install-wp-really-simple-ssl-plugin/).

**Still want more?** [Enable HTTP Strict Transport Security (HSTS) within the .htaccess](https://www.inmotionhosting.com/support/website/force-hsts-using-htaccess/) file or [Cloudflare](/support/website/hsts-using-cloudflare/) for improved speed too.

### Output Debug Information

Public-facing debug errors can divulge important information for a hacker looking for vulnerabilities – *e.g. version numbers and file paths*. [Turn off WordPress debugging](https://www.inmotionhosting.com/support/edu/wordpress/how-to-enable-wordpress-debugging/) using the dashboard or [WP-CLI](https://www.inmotionhosting.com/support/edu/wordpress/wp-cli/how-to-enable-wordpress-debugging-using-wp-cli/).

**Want more?** Click the **Info** tab in **Site Health** see all information at once.

### Communicate Securely with Other Services, Communicate with WordPress.org, Background Updates

These three tests together ensure e-commerce plugins, other plugins, WordPress core, and themes can work and update correctly.

**Want more?** [Enable automatic updates](https://www.inmotionhosting.com/support/edu/wordpress/enable-disable-wp-updates/) within your *wp-config.php* file. And check out [WooCommerce](/support/edu/wordpress/woocommerce/) to integrate e-commerce in your WordPress website.

Learn more from our [WordPress Education Center](/support/edu/wordpress/).