I'm wondering if this is normal, or if there is something unique about my situation.
I recently spun up the latest copy of the Turnkey Wordpress (not the RC) appliance and soon started failing security audits from our main office.
Below are some of the examples:
"Based on the banner returned by the remote host, the device is running a version of PHP 5 that is prior to 5.2.7 and suffers from multiple published vulnerabilities. Some of these vulnerabilities may lead to denial of service or code execution."