Description
A composer.lock file was discovered in this directory. Composer is a tool for dependency management in PHP. It allows you to declare the libraries your project depends on and it will manage (install/update) them for you. After installing the dependencies, Composer writes the list of the exact versions it installed into a composer.lock file. This locks the project to those specific versions.
Acunetix analyzed all the project dependencies listed in the composer.lock file and found one or more project dependencies with known vulnerabilities. It's recommended to upgrade all the vulnerable packages to the latest versions.
Remediation
Upgrade each vulnerable package to the latest version.
References
Related Vulnerabilities
WordPress Plugin Quick Paypal Payments Multiple Vulnerabilities (5.7.25)
WordPress Plugin Controlled Admin Access Security Bypass (1.5.5)
PHP Out-of-bounds Write Vulnerability (CVE-2021-21704)
Oracle Database Server CVE-2007-5505 Vulnerability (CVE-2007-5505)
WordPress Plugin Crayon Syntax Highlighter 'wp_load' Parameter Remote File Include (1.12.1)