Critical issues
High severity
Low severity
Informational
Four items, ordered by business impact. Nothing here blocks operations today.
Business impact
Visitors may see browser security warnings; affects SEO and brand trust.
Recommended action
Renew and deploy the updated SSL/TLS certificate across the primary domain and subdomains.
Business impact
Minor exposure risk for GDPR/consent cookies on insecure network paths.
Recommended action
Update web server / WordPress cookie configurations to append Secure and HttpOnly attributes.
Business impact
Old XML sitemap paths trigger 301 redirects rather than serving clean endpoints.
Recommended action
Clean up retired sitemap routes and prune unneeded legacy files from the server root.
Business impact
Standard behavior in WordPress login redirects and client-side routing.
Recommended action
Routine code review during upcoming maintenance sprints; no immediate fix required.
What it means
The certificate securing the encrypted connection between your visitors and the website has expired.
Action needed
Install a current SSL certificate to ensure visitor connections remain trusted and warning-free.
What it means
Certain preference cookies (gdpr[consent_types], gdpr[allowed_cookies]) are not explicitly tagged with browser-level security attributes.
Action needed
Ensure all site cookies include Secure (HTTPS only) and HttpOnly (blocks malicious script reads) flags.
What it means
Historical sitemap paths (e.g., category-sitemap1.xml) are still accessible via redirects rather than pointing cleanly to active resources.
Action needed
Update URL routing rules in your SEO plugin to maintain clean URL structures.
Our technical engineering team is ready to apply these patches, renew certificates, and harden your site configurations without any downtime.