willem.com

WordPress: 10 easy security tips to lock down your site

Keep hackers out of the world's most popular content management system

Mar. 31, 2019 -

A lot of people use WordPress to manage their website, therefore it's no surprise people ask me to have a look at their site's security. As ethical hacker, I encounter WordPress in different shapes, sizes and states. Some of them are really badly protected against hacks. Prevent your site from being hacked using these 10 practical tips.

Continue reading
Use WP Security Audit Log to keep an eye on what's happening with your WordPress website (wpsecurityauditlog.com)
Use WP Security Audit Log to keep an eye on what's happening with your WordPress website (wpsecurityauditlog.com)
Sniff WordPress password using WireShark packet capturing (via blog.wpscans.com)
Sniff WordPress password using WireShark packet capturing (via blog.wpscans.com)
Limit access by IP basis to XML-RPC using a .htaccess file
Limit access by IP basis to XML-RPC using a .htaccess file
Check the reputation of a WordPress plugin by looking at the number of downloads and its rating
Check the reputation of a WordPress plugin by looking at the number of downloads and its rating
It's pretty hard hacking into my WP-Admin page because you cannot find it (hint: it's not at /wp-admin)
It's pretty hard hacking into my WP-Admin page because you cannot find it (hint: it's not at /wp-admin)
Password dictionary attacks use lists of known (leaked) passwords, you can find them on shady parts of the internet
Password dictionary attacks use lists of known (leaked) passwords, you can find them on shady parts of the internet

Other stories

all blog posts

Tagged

CloudCyber SecurityHackingNetworkingServerWebdesign

Articles (148)