When a connected site checks in, the plugin sends a compact list of WordPress, plugin, and theme versions. The Hub matches those versions and lists open nags on Alerts. Basic sees severity, a plain-English risk, and a button to update in WP Admin. Pro and Shield Care also see the advisory title and the fixed-in version.

Updating in WordPress is the real fix. High-severity matches email once per issue. You never change DNS. This is our own list of public version bounds.

If Alerts is empty, the last check-in did not match an outdated component, or the site has not sent inventory yet.

Open Alerts or Virtual patching vs updates.