Hi @bojan
I would like to know if it’s normal to not receive any automated e-mails about the vulnerability checker.
I have some sites with alerts, but I never received an email for vulnerabilities. But I well receive e-mails : Daily Digest, Domain Monitor, etc…
Thanks
Hey @nicolas
Are the Schedule automatic checks and Send email notifications options enabled in the Vulnerability Checker settings (wp-admin/admin.php?page=Extensions-Mainwp-Vulnerability-Checker-Extension)?
Vulnerability Checker emails are sent after a scheduled automatic-check cycle finishes. They are not triggered immediately when a vulnerability is detected during a manual check or site sync.
The email uses the recipient(s) configured for Daily Digest Email under MainWP Dashboard → Settings → Email Settings.
If no recipient has been saved there, it uses the WordPress Administration Email Address.
Hi @bojan
Yes, the Schedule automatic checks and Send email notifications options are enabled.
And I already receive the enabled Daily Digest Email to the saved email address. That’s why I don’t understand the problem.
Scheduled automatic vulnerability check :
Last execution: August 3 aat 3:20pm
Next execution: August 10 at 3:20pm
The Vulnerability Checker sends an email after the scheduled check cycle finishes, but only when at least one site has a detected, non-ignored vulnerability. It does not send an email when all results are clear.
You mentioned that some sites have alerts. Do those sites show a Last check date corresponding to the August 3 automatic check, and were the vulnerabilities still detected after that check?
Please also check the spam/quarantine folders for an email with the subject MainWP - Vulnerability check.
I have for example 13 sites which show needed update of WordPress (regarding the last known critical vulnerability).
All these sites show a last check on August 3 at 8:38pm. Yes, this vulnerability is still detected on these sites.
I do not have any Spam email from my MainWP server.
Thanks for confirming.
The notifications should have been sent out in that case.
Would you mind opening a private Help Desk ticket so we can collect some additional information & investigate further?
Please refer to this Community thread by its URL in the ticket.
Hi @bojan ,
I will do that.
But I can provide you with additional non-sensitive information here, just in case something is inappropriate in my setup.
On my WordPress site, WP-Cron is disabled.
MainWP WP-Cron is enabled.
In this case I created (a long time ago) a specific Cron job on my CPanel.
Here is the Cron job :
Every 10 minutes
wget -q -O - "https://wwwwwwww.xyz/wp-cron.php?doing_wp_cron" > /dev/null 2>&1
With this setup, the Daily Digest Email is correctly sent, and all internal MainWP jobs seem to work fine.
Only one Email was sent in the last 24 hours (the data is retained for 1 day > web hosting rule)
I don’t receive alerts about any cron task delays.
Here are the Cron events :
Hook: mwp_events_cleanup
Next run: In 45 minutes
Schedule: Today at 10:50 am Every Hour
! No Action
Hook: mainwp_cronuptimemonitoringcheck_action
Next run: Now
Schedule: Today at 9:50 am Every Minute
Action: MainWP\Dashboard\MainWP_Uptime_Monitoring_Schedule->cron_uptime_check()
Hook: mainwp_cronupdatescheck_action
Next run: Now
Schedule: Today at 9:50 am Every Minute
Action: MainWP\Dashboard\MainWP_System_Cron_Jobs->cron_updates_check()
Hook: mainwp_cron_perform_general_process
Next run: Now
Schedule: Today at 9:50 am Every Minute
Action: MainWP\Dashboard\MainWP_System_Cron_Jobs->cron_perform_general_process()
Hook: mainwp_croncheckstatus_action
Next run: Now
Schedule: Today at 9:50 am Every Minute
! No Action
Hook: mainwp_maintenance_cron_scheduled_start
Next run: In 20 minutes
Schedule: Today at 10:15 am Every Hour
Action: Maintenance_Extension::cron_to_start_scheduled_tasks()
Hook: mainwp_cronreconnect_action
Next run: In 20 minutes
Schedule: Today at 10:15 am Every Hour
Action: MainWP\Dashboard\MainWP_System_Cron_Jobs->cron_reconnect()
Hook: mainwp_cronsitehealthcheck_action
Next run: In 20 minutes
Schedule: Today at 10:15 am Every Hour
Action: MainWP\Dashboard\MainWP_System_Cron_Jobs->cron_check_websites_health()
Hook: mainwp_ssl_monitor_action_cron_start
Next run: In 16 heures 4 minutes
Schedule: Tomorrow at 1:59 am MainWP SSL Monitor Continue Interval
Action: MainWP\Extensions\SSL_Monitor\MainWP_SSL_Monitor_Schedule->handle_ssl_monitor_cron_start()
Hook: mainwp_domain_monitor_action_cron_start
Next run: In 16 heures 4 minutes
Schedule: Tomorrow at 1:59 am MainWP Domain Monitor Continue Interval
Action: MainWP\Extensions\Domain_Monitor\MainWP_Domain_Monitor_Schedule->handle_domain_monitor_cron_start()
Hook: mainwp_ssl_monitor_action_cron_continue
Next run: In 16 heures 9 minutes
Schedule: Tomorrow at 2:04 am Once Every 5 Minutes
Action: MainWP\Extensions\SSL_Monitor\MainWP_SSL_Monitor_Schedule->handle_ssl_monitor_cron_continue()
Hook: mainwp_domain_monitor_action_cron_continue
Next run: In 16 heures 9 minutes
Schedule: Tomorrow at 2:04 am Once Every 5 Minutes
Action: MainWP\Extensions\Domain_Monitor\MainWP_Domain_Monitor_Schedule->handle_domain_monitor_cron_continue()
Hook: mainwp_cronpingchilds_action
Next run: In 21 heures 20 minutes
Schedule: Tomorrow at 7:15 am Une fois par jour
Action: MainWP\Dashboard\MainWP_System_Cron_Jobs->cron_ping_childs()
Hook: mainwp_crondeactivatedlicensesalert_action
Next run: In 21 heures 20 minutes
Schedule: Tomorrow at 7:15 am Une fois par jour
Action: MainWP\Dashboard\MainWP_System_Cron_Jobs->cron_deactivated_licenses_alert()
No Fatal error, but I have several lines with a specific PHP Warning :
[06-Aug-2026 01:50:17 UTC] PHP Warning: Undefined array key "name" in .../wp-content/plugins/mainwp/class/class-mainwp-system-cron-jobs.php on line 1037
File: class-mainwp-system-cron-jobs.php
foreach ( $websiteTrans as $transSlug => $transInfo ) {
$check_individual_digest = true;
$newUpdate = ! isset( $websiteLastTrans[ $transSlug ] );
$item = array(
'id' => $website->id,
'name' => $website->name,
'url' => $website->url,
Line 1037 > 'translation' => $transInfo['name'],
'version' => $transInfo['version'],
'slug' => $transInfo['slug'],
);
```
### WordPress Check Required Detected ###
FileSystem Method = direct direct Pass
MultiSite Disabled =true true Pass
WordPress Memory Limit >=64M 128M Pass
WordPress Version >=6.2 7.0.3 Pass
### PHP Required Detected ###
cURL Extension Enabled =true true Pass
cURL Timeout >=300 seconds 300 Pass
cURL Version >=7.29.0 8.21.0 Pass
PHP Loaded Extensions Indisponible Core, PDO, Phar, Reflection, SPL, SimpleXML, SourceGuardian, bcmath, bz2, calendar, ctype, curl, date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, igbinary, imagick, imap, intl, json, ldap, libxml, litespeed, mbstring, mcrypt, msgpack, mysqli, mysqlnd, openssl, pcntl, pcre, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql, posix, random, readline, session, shmop, soap, sockets, sodium, sqlite3, standard, sysvmsg, sysvsem, sysvshm, tidy, tokenizer, xml, xmlreader, xmlwriter, xsl, zip, zlib
Function `tmpfile` enabled Indisponible Activé Pass
PHP Disabled Functions Indisponible Aucune fonction désactivée.
OpenSSL Version >=OpenSSL/1.1.0 OpenSSL/1.1.1w Pass
OpenSSL Working Status Yes Yes Pass
PCRE Backtracking Limit >=10000 1000000 Pass
PHP Allow URL fopen Indisponible OUI
PHP Max Execution Time >=30 seconds 360 Pass
PHP Max Input Time >=30 seconds 360 Pass
PHP Memory Limit >=256M 2048M Pass
PHP Post Max Size >=2M 512M Pass
PHP Upload Max Filesize >=2M 512M Pass
PHP Version >=7.4 8.3.31 Pass
PHP Session enabled Indisponible Activé Pass
SSL Extension Enabled =true true Pass
SSL Warnings = empty Pass
PHP Exif Support Indisponible OUI
PHP IPTC Support Indisponible OUI
PHP XML Support Indisponible OUI
### MySQL Required Detected ###
MySQL Client Encoding Indisponible utf8mb4
MySQL Mode Indisponible NON CONFIGURÉ
MySQL Version >=5.0 11.4.12-MariaDB Pass
### Connectivity & Authentication Detected Value ###
OpenSSL signature algorithm OPENSSL_ALGO_SHA256 (par défaut)
Server self connect Unexpected response body. Note: This is common and usually not a problem unless WP-Cron or loopback requests are failing.Warning
Force IPv4 Non
HTTPS Activé
Permalink structure /%postname%/ Pass
Public Dashboard IP Détecté Pass
Verify connection method OpenSSL (par défaut)
Verify SSL certificate Oui
WordPress REST API reachability Reachable (HTTP 200) Pass
### Scheduler & Background Jobs Detected Value ###
Advanced automatic updates scheduleDaily at 0:00
Check for available updates Last run: 7 août 2026 10h30 | Next run: Traitement de vos sites.
Daily update time 3:00
Daily update frequency Quatre fois par jour
Reconnect sites Last run: 7 août 2026 10h20 | Next run: 7 août 2026 11h15
Uptime monitoring schedule Last run: 7 août 2026 9h00 | Next run: 7 août 2026 10h30
Use WP Cron Oui
### Server Configuration Detected Value ###
User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Architecture 64 bit
Accept Content text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Gateway Interface
Accept-Charset Content Indisponible
Server Software Apache
Server Protocol HTTP/1.1
Operating System Linux
Request Time 1786091576
Memory Usage 90.44 MB
### MainWP Overview Detected Value ###
MainWP REST API enabled Oui Pass
MainWP upload directory Writable Pass
Number of connected sites 21
MainWP Dashboard Version Latest: 6.1.6 | Detected: 6.1.6 Pass
### MainWP General Settings Detected Value ###
Advanced automatic updates delay 1 day
After updates HTTP response check Oui
After updates HTTP response method HEAD
Automatic updates day Every day
Automatic updates frequency Daily
Automatic updates time 0:00
Backup before update Oui
Backups kept on server 1
Backup to external sources Oui
Load files in memory before zippingOui
Dashboard widgets shown 18 visible
Auto detect maximum file descriptors on child sitesNon
Disable update confirmations Non
Send email when backup starts Non
Send email when backup fails Non
Execute backup tasks in chunks Non
Archive format tar.gz
Date format j F Y
Time format G\hi
Full backup tolerance before update5 days
Timezone Europe/Paris
Hide Update Everything Oui
MainWP legacy backups enabled Non
Plugin advanced automatic updates Désactivé
WP Core advanced automatic updates Désactivé
Theme advanced automatic updates Désactivé
Sidebar position Droit
Primary backup system MainWP UpdraftPlus Extension
Show language updates Oui
Abandoned plugins/themes tolerance 365 days
Translation advanced automatic updatesDésactivé
Maximum file descriptors fallback value150
### MainWP Advanced Settings Detected Value ###
OpenSSL signature algorithm OPENSSL_ALGO_SHA256 (par défaut)
Browser cache expiration time 10 minutes
Minimum delay between requests to the same IP1000 ms
Minimum delay between requests 200 ms
Force IPv4 Non
Maximum simultaneous uptime monitoring requests10
Maximum simultaneous install and update requests3
Maximum simultaneous sync requests 8
Maximum simultaneous requests per IP1
Optimize data loading Oui
Maximum simultaneous requests 4
Selected data to sync 20 of 20 enabled
Sites processed per sync batch 10
Sync batch sleep interval 5 seconds
Verify connection method OpenSSL (par défaut)
Verify SSL certificate Oui
### MainWP Monitoring Settings Detected Value ###
Down confirmation check Activé
Enable site health monitoring Oui
Enable uptime monitoring Oui
Interval 6h
Keyword monitoring value Not configured
Method HEAD
Monitoring data retention Keep forever
Monitor type HTTP(s)
Site Health threshold Devrait être amélioré
Timeout 60s
Up HTTP codes 200,201,202,203,204,205,206
### MainWP Email Settings Detected Value ###
Domain Monitor Notification Email Activé | 1 recipient(s) | Subject set | Heading set
Extension License Deactivation Notification EmailActivé | 1 recipient(s) | Subject set | Heading set
Daily Digest Email Activé | 1 recipient(s) | Subject set | Heading set
Site Health Monitoring Email Activé | 1 recipient(s) | Subject set | Heading set
After Updates HTTP Check Email Activé | 1 recipient(s) | Subject set | Heading set
SSL Monitor Notification Email Activé | 1 recipient(s) | Subject set | Heading set
Uptime Monitoring Email Activé | 1 recipient(s) | Subject set | Heading set
### MainWP Cost Tracker Settings Detected Value ###
Currency USD
Currency position left
Decimals 2
Payment methods 0 configured
Product categories 5 configured
Decimal separator .
Thousand separator ,
### MainWP Network Activity SettingsDetected Value ###
Automatically archive logs Non
Child-site Network Activity retention7 days
Data retention period Année
Disabled change-log event types 7
Disabled child-site event types 0
Disabled dashboard event types 1
Enable Network Activity logging Oui
### MainWP API Backups Settings Detected Value ###
Akamai (Linode) Désactivé
Cloudways Désactivé
cPanel (WP Toolkit) Désactivé
DigitalOcean Désactivé
GridPane Désactivé
Kinsta Désactivé
Plesk Désactivé
Vultr Désactivé
### MainWP Tools Settings Detected Value ###
Chatbase Non
Current MainWP theme default-dark
Guided tours Non
Guided video Non
### Debug & Logs Detected Value ###
PHP error_log path Configured
PHP error_log readable Oui
PHP log_errors Oui
WP_DEBUG Non
WP_DEBUG_DISPLAY Non
WP_DEBUG_LOG Non
### Potential Conflicts Detected Value ###
Caching / performance plugins None detected
Drop-ins / object cache None detected
Maintenance mode indicators None detected
Security / access-control plugins None detected
### Extensions Version License ###
MainWP Bulk Settings Manager Extension5.0.5 Actif Pass
MainWP Cache Control Extension 5.1.1 Actif Pass
MainWP Code Snippets Extension 5.1.1 Actif Pass
MainWP Database Updater Extension 5.1.1 Actif Pass
MainWP Domain Monitor Extension 5.2 Actif Pass
MainWP Maintenance Extension 5.2 Actif Pass
MainWP SSL Monitor Extension 5.2 Actif Pass
MainWP UpdraftPlus Extension 5.1.1 Actif Pass
MainWP Vulnerability Checker Extension5.0.4 Actif Pass
WP Activity Log 5.6.5
```
Thanks for providing additional details.
I don’t see anything obviously incorrect in your cron configuration. The missing Vulnerability Checker cron event is expected between scheduled checks, and the PHP warning shown is unrelated to Vulnerability Checker emails.
Please include this information in the Help Desk ticket. We may need to enable additional logging before the next scheduled check and review the results shortly afterward, especially since your hosting email records are retained for only 24 hours.