Avast blocking my Wordpress site

[REDACTED]

Hi, guys!
Please assist me in finding the problem with my Wordpress site and why Avast is blocking it:
htxp://trials-and-errors.com

I've scanned the website with all other free tools out there and all returned no threats / clean site.
Wordpress & plugins all updated to latest versions.

Thanks!

[Asyn]

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

[polonus]

Hi Octavian5,

Word Press configuration error: Warning User Enumeration is possible

The first two user ID's were tested to determine if user enumeration is possible.

ID   User   Login
1   attempts   attempts
2   None   None
It is recommended to rename the admin user account to reduce the chance of brute force attacks occurring. As this will reduce the chance of automated password attackers gaining access. However it is important to understand that if the author archives are enabled it is usually possible to enumerate all users within a WordPress installation.

Retirable jQuery library detected: http://retire.insecurity.today/#!/scan/361389adac6392857eed922d9c32a83175997d7669dd58dfd64c5fe6f4498c28

Cloaking detected: Checking hxtp://trials-and-errors.com

Checking for cloaking
There is a difference of 11 bytes between the version of the page you serve to Chrome and the version you serve to GoogleBot. This probably means some code is running on your site that's trying to hide from browsers but make Google think there's something else on the page




Consider: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=trials-and-errors.com&ref_sel=GSP2&ua_sel=ff&fs=1

F-grade status and recommendations: https://observatory.mozilla.org/analyze.html?host=trials-and-errors.com

Probably the detection was because you share your IP on a bad webhost: https://observatory.mozilla.org/analyze.html?host=trials-and-errors.com

Wait for a final verdict from an avast team member here, as we are volunteers with relevant knowledge, but cannot unblock or exclude your domain on a general IP block,

polonus (volunteer website security analyst and website error-hunter)

[savcin]

URL detection disabled.