Without knowing the details, it sounds like you need to configure the server correctly or if you use a shared host then you should contact them.
I can check the site later when I’m in front of a computer. Anyway, a friendly advice to get good help faster, submit more details such as versions of the plugins, WP version, where you host your site, which theme do you use and so on.
You mention “other security plugins”, what plugins as well as versions. The same goes for Wordfence. Are you using the free versions or premium/paid versions?
What kind of pen test did you do?
Did you performed it yourself or did you use any online service? In either case, the name of the software / service would help. Was it a paid one or a free one?
Also, copy / paste the result you got
Did the warnings occur when you activated WooCommerce? Or what makes you think it’s WooCommerce related? Do you use any extensions for WooCommerce?
Also it helps if you write what DNS you use.
Sure, it’s usually very easy to find out all the answers anyway, at least if you’re not good at hiding all those details. But if you provide the all related information in the question I could help you right away.