According to Sucuri’s opens in a new windowWebsite Hacked Trend Report 2016 – Q1, the “explosion and dominance” of Content Management Systems–especially WordPress–has led to “a large influx of unskilled webmasters and service providers responsible for the deployment and administrations of these sites.” As such, DIY or low-cost WordPress websites are built using unsafe plugins and vulnerable themes, and are not properly maintained (e.g., updating the core and plugins to implement security patches as they’re released).
WordPress is the leading open-source CMS platforms on the market, leading in adoption by businesses of all sizes and everyday website owners. In all instances, regardless of platform, the leading cause of infection could be traced to the exploitation of software vulnerabilities in the platform’s extensible components, not its core. Extensible components directly relate to the integration of plugins, extensions, components, modules, templates, themes and other similar integrations. — Sucuri
So the problem isn’t WordPress itself, it’s how it’s put together and maintained. Expert WordPress developers like AndiSites use only known-safe, updateable themes and plugins. We encourage ongoing support and maintenance to ensure that sites are kept safe and running well. According to opens in a new windowWPBeginner, 83% of WordPress websites that get hacked are running an old version of the WordPress core.
Blogger Matt Banner has put together a opens in a new windowthorough explanation of how to keep your WordPress website from being hacked, from the beginner to the professional level. He’s also created a great infographic (see below) to summarize the highlights, including tips to prevent WordPress vulnerabilities:
- Update WordPress to the latest version
- Backup regularly
- Don’t use “admin” as your username
- Don’t have a “Login” link on your site that goes to the back-end (use /wp-admin only)
- Use a reliable hosting company (we highly recommend opens in a new windowSiteGround)
- Use trustworthy plugins and keep them updated
- Use a security plugin (you can also use a service like opens in a new windowSucuri.net)
- Make sure your passwords are strong (we like opens in a new windowStrong Password Generator)
- Use a CDN firewall (reputable hosting providers provide opens in a new windowCloudFlare at no or low cost)
Keep your site safe, and if you need help or advice, contact us. We’d love to help!