Insecurities on website!

Viruses and worms
1

See: https://securityheaders.io/?q=https%3A%2F%2F21stcenturywire.wordpress.com
jQuery retirable libraries: -https://21stcenturywire.wordpress.com
Detected libraries:
jquery - 1.11.3 : -https://s0.wp.com/_static/??-eJyFzs0KwjAMAOAXsiub8+BBfJb9ZCW1bWqTrujTW0EP4lAIJCRfQnSJCsPk8gysbY1rhnR7pcbyTv8CyqNJg0DjMbzxREEgyNN6GtGBygxpMLVXDy204SKxeGCuaGP6+RKGFaH8ZRYkDtNFJWC8f10dHRkVXTYYWNfawExZ1ELOUdEFZwNSd87+1Pb9vuvaY3uwD0gZb60=
Info: Severity: medium
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
jquery-migrate - 1.2.1 : -https://s0.wp.com/_static/??-eJyFzs0KwjAMAOAXsiub8+BBfJb9ZCW1bWqTrujTW0EP4lAIJCRfQnSJCsPk8gysbY1rhnR7pcbyTv8CyqNJg0DjMbzxREEgyNN6GtGBygxpMLVXDy204SKxeGCuaGP6+RKGFaH8ZRYkDtNFJWC8f10dHRkVXTYYWNfawExZ1ELOUdEFZwNSd87+1Pb9vuvaY3uwD0gZb60=
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
2 vulnerable libraries detected

Check The following plugins were detected by reading the HTML source of the WordPress sites front page.
ie-sitemode
Also consider: http://toolbar.netcraft.com/site_report?url=https://21stcenturywire.wordpress.com

DROWn vulnerable: https://test.drownattack.com/?site=whois.markmonitor.com

4 issues here: http://dnssec-debugger.verisignlabs.com/21stcenturywire.wordpress.com

pol

2

One external link comes blocked by my script blocker: -https://s.skimresources.com/js/725X1342.skimlinks.js
where the script launched from there is also being blocked by uMatrix script blocker: -https://ssl.google-analytics.com/ga.js
So see where it lands, see: http://www.domxssscanner.com/scan?url=https%3A%2F%2Fs.skimresources.com%2Fjs%2F725X1342.skimlinks.js
link clickjacking going on here: https://www.virustotal.com/nl/domain/wordpress.redirectingat.com/information/
https://www.herdprotect.com/domain-wordpress.redirectingat.com.aspx
and I would not have expected such meagre F-Status security header scan results: https://securityheaders.io/?q=wordpress.redirectingat.com
At least how is GoDaddy keeping us secure or is it wide open to abuse?

polonus (volunteer website security analyst and website error-hunter)