Website security
wp-config.php hardening: the 5 constants most owners never set
If you run a WordPress site for your business, there’s a decent chance you’ve never opened wp-config.php. Totally normal. Most...
Read ArticleWordPress 7.0.4 is out – not July’s no-password flaw, but update now
Last month we wrote about the WordPress flaw that let attackers in without a password. That was the 7.0.0 and...
Read ArticleWhy your hosting’s “malware detected” email often arrives too late
You get an email from your host. Subject line: malware detected. Your stomach drops a bit. Fair enough. But here’s...
Read ArticleHow Fake Plugin and Theme Updates Trick Site Owners
You log into WordPress and see a warning. A plugin needs updating. Or maybe a theme. There’s a bright button....
Read ArticleWhat to Do the Moment You Suspect Your Site Is Compromised
You don’t need a giant red warning screen to have a hacked website. Sometimes it’s weirder than that. Your homepage...
Read ArticleREST API User Enumeration: How Bots Find Your Admin Usernames
You lock your front door. Good. But then you hang a little sign next to it saying, “Hi, the keyholder...
Read ArticleThe WordPress flaw that let hackers in without a password – what happened
Last week was a long one. If you run a WordPress site and you felt a little jolt of panic...
Read ArticleWhy your site gets reinfected after a “successful” cleanup
You paid to clean the hacked site. Or maybe your developer “fixed it” in an afternoon. The weird redirect disappeared,...
Read ArticleWordPress security on a budget: what’s actually worth paying for
If you run a small business website, you’ve probably seen the same advice over and over. Buy this premium plugin....
Read ArticleReading your WordPress activity log: normal vs suspicious
Your WordPress activity log sounds a bit boring at first. Like something only a developer would care about. But honestly,...
Read ArticleAdmin account mistakes that hand hackers the keys
If a hacker gets into your WordPress admin account, the game is basically over. They don’t need fancy malware first....
Read ArticleHow Attackers Find Your WordPress Site in the First Place
A lot of small business owners picture hacking like this: some shady person picks your website, stares at it for...
Read Article