# How To Review Site Vulnerabilities With BetterShield Hub?

Group reported plugin vulnerabilities by vulnerability or site and find sites whose vulnerability check is old or unavailable.

In **[BetterShield Hub](/bettershield-hub/)**, **Security › Vulnerabilities** combines the plugin vulnerability reports from the sites you can access.

_**Note:** Sign in to your free [BetterShield Hub](/bettershield-hub/) account. Your workspace role and site permissions determine which information and actions you can use._

## What it does

The summary counts sites with confirmed affected-version matches, confirmed vulnerabilities and sites with stale checks. **Group** switches between **By vulnerability** and **By site**. **Not checked, or out of date** explains which sites are missing current information.

<span id="set-it-up" aria-hidden="true"></span>

## Step 1: Open the feature

Connect the sites and allow Hub to read their security information.

<figure class="doc-shot">
  <img src="/docs/screenshots/hub-vulnerabilities.png" alt="BetterShield Hub Vulnerabilities screen grouped by vulnerability." width="2880" height="1800" loading="lazy" decoding="async">
  <figcaption>The screen separates current reports from sites that are not checked or out of date.</figcaption>
</figure>

## Step 2: Review vulnerabilities across BetterShield Hub sites

- Open **Security › Vulnerabilities**.
- Under **Group**, choose **By vulnerability** or **By site**. The default is **By vulnerability**.
- Open a row to continue on the affected site.

Hub keeps uncertain version matches on the individual site page under **Match uncertain**. They are not counted as confirmed vulnerabilities in the Sites chip or filter. Informational advisory records are excluded from actionable findings.

There is no vulnerability policy on this screen. It reports what each site knows. Optional vulnerability checks use the site’s consent and current advisory data; a stale or unavailable check is not a clean result.

## Recommended settings

Our advice:

- Start with items affecting several sites.
- Check stale sites before reading a quiet list as complete.
- Confirm plugin compatibility and backups before updating production sites.

## What it can break and how to undo

Reading and grouping change nothing. An update made on a site can affect that site's plugin behavior. Follow that site's update and rollback process.

Hub does not automatically update a plugin from this screen.

<span id="check-it-is-working" aria-hidden="true"></span>

## Final Outcome

Current sites appear under the chosen grouping.

- Switching **Group** changes the list without changing the counts.
- Sites with old or missing checks appear under **Not checked, or out of date**.

<figure class="doc-shot">
  <img src="/docs/screenshots/hub-vulnerabilities.png" alt="BetterShield Hub Vulnerabilities screen grouped by vulnerability." width="2880" height="1800" loading="lazy" decoding="async">
  <figcaption>Example Hub vulnerabilities view. Check the saved values and status on your own site.</figcaption>
</figure>

## Related

- [Browse and filter sites](/docs/hub-sites/)
- [Run a check across sites](/docs/hub-run-checks/)
- [Understand your score and findings](/docs/score-and-findings/)

This is how you can review site vulnerabilities with BetterShield Hub.

Getting Stuck? Feel free to contact our [Dedicated Support Team](/support/).