Software

Site software page shows an overview of all the software components your site has been built with.

To see an overview of all your site’s software, navigate to Sites > yourdomain.com > Software in Patchstack App.

Software management is only for WordPress

On the this software subpage, you can also manage the software components of your WordPress site.

JavaScript and Node.js projects

This page describes the plugins and themes of a WordPress site. A JavaScript or Node.js app monitored with @patchstack/connect has a Packages tab instead, listing its npm dependencies — see Pulse packages.

The following actions are available only for WordPress CMS:

• Have an overview of software your site is using and see all your software versions
• See if any of the software is found vulnerable or outdated, how many vulnerabilities each one has, and whether Patchstack is already mitigating them
• Click the Vulnerabilities cell to read the advisory behind it. Where a package has several, the arrows at the top of the panel move between them
• Update, activate, deactivate, or delete the existing plugins/themes
• Update all your software with one click
• Force resynchronization between Patchstack App and your site if something looks out of sync

To perform any actions with specific plugins or themes on your site, follow the steps below:

1. Check the checkboxes of your plugins or themes (at the left side of the table row)
2. Click on the Actions button next to the search bar
3. You can then pick one of the following actions:
   • Update
   • Activate
   • Deactivate
   • Delete

Software that is grayed out, is currently either deactivated on the website. If the checkbox is missing for that row, it means this software cannot be updated via third party apps like Patchstack. This goes for some of the premium licensed software, which use non-standard updating mechanisms.

Update all your software with one click

You can update components altogether by clicking the Update All button.
Just keep in mind to back up your files and database before doing that.

Whether you are protected

A list of vulnerabilities reads as a list of things to do, which is wrong when Patchstack is already blocking attacks on them. A summary above the table says which of three states the site is in:

State	What it means
No known vulnerabilities	Nothing installed matches a vulnerability Patchstack knows about.
Mitigated	Every vulnerable component is covered by a vPatch, and protection is on for this site. Attacks are blocked; there is nothing you need to do right now.
Not mitigated	At least one vulnerable component has no virtual patch behind it, or protection is switched off for the site.

Individual rows say the same thing: a component covered by a virtual patch shows Mitigated in place of its patch priority, and its version is no longer shown in red. The priority moves into the tooltip, along with a reminder of what mitigation does and does not do.

Mitigated is not fixed. A virtual patch blocks attempts to exploit the vulnerability. The vulnerable version is still installed, and updating it is still the permanent fix.