Incorrect plugin matching

Jetpack Protect has problems telling apart plugins. I ran the scan on a site that has the following plugins:

– Relevanssi Premium 2.19.1
– Relevanssi Premium Snowball Stemmer 1.4

According to Jetpack Protect, both these plugins have multiple vulnerabilities. However, these are all false positives: they are old vulnerabilities for the free version of Relevanssi. Relevanssi Premium has had vulnerabilities of its own, but all have been fixed. Relevanssi Premium Snowball Stemmer has never had any vulnerabilities.

I tried scanning with WPScan, and WPScan does not do the same. It can tell the different plugins apart and doesn’t blame Relevanssi Premium for vulnerabilities in old versions of Relevanssi.

See screenshots:

Jetpack Protect: https://www.dropbox.com/s/8xlruy466alu3ht/jetpack-protect-false-positives.png?dl=0.
WPScan: https://www.dropbox.com/s/p75vp60yrt0sy9p/wpscan.png?dl=0.