It’s not a bug it’s a recommendation that you alter the default prefix to ensure tighter security.
There’s a fix for this here
http://wordpress.org/support/topic/267649
Sorry but that thread doesn’t answer my question. I have been into phpmyadmin and reviewed all the database tables. All the tables in my wordpress database all have wp_ prefix. However, Security Scan says all the tables are wp-. How can that be when they are all reading wp_?
While it is a recommendation, Security Scan also recommended the change of the user login as well. When I changed the user login, the software immediately recognized the change. Why is it not recognizing the change in the table prefixes?
Make sure you backup your database before doing this
Export your database with all tables/data. Then open it up in a text editor and then search/replace wp_ with something that you want. For example you can change them all from wp_ to ik_
Then highlight all the tables in your db. Then drop the tables. Don’t delete the tables, dump them. Then import your new sql file with the changes you made to the wp_. Then you need to change your wp_config.php file to reflect the wp_ change:
$table_prefix = ‘wp_’;
Change that above wp_ to the new name you gave it. In my example you would change it from wp_ to ik_ then save and upload the file and you’re done.
Now you might have issues with your blog not showing up on the site. That has been an issue. Don’t have a fix for that yet.