A composer.lock file was discovered in this directory. Composer is a tool for dependency management in PHP. It allows you to declare the libraries your project depends on and it will manage (install/update) them for you. After installing the dependencies, Composer writes the list of the exact versions it installed into a composer.lock file. This locks the project to those specific versions.
Acunetix analyzed all the project dependencies listed in the composer.lock file and found one or more project dependencies with known vulnerabilities. It's recommended to upgrade all the vulnerable packages to the latest versions.
Upgrade each vulnerable package to the latest version.
WordPress Plugin kk Star Ratings 'root' Parameter Remote File Include (1.7)
WordPress Plugin Events Manager Multiple Cross-Site Scripting Vulnerabilities (5.3.3)
WordPress Plugin File Manager Multiple Cross-Site Request Forgery Vulnerabilities (5.0)
WordPress Plugin Rotating Testimonial Cross-Site Scripting (1.1)