The Defender plugin shows that I need to disable pingbacks and trackbacks, but this has already been done in WordPress admin. See screenshots. Additionally, I reviewed the database and find that there are no previous posts with pingbacks enabled. Same goes for the security salts notice – these values have been changed (manually by myself, and automatically through the plugin) but the notices remain. Thanks.