Administrative interfaces
An accessible login page is not by itself a vulnerability. Authorization, authentication and permitted access need a separately scoped review.
Separate review needed
This topic is educational. The current engine does not directly test it. Arrange a separately scoped review when you need to assess it.
Keep the scope.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology