WordPress Security: How to Avoid Getting Hacked

According to Sucuri’s  opens in a new windowWebsite Hacked Trend Report 2016 – Q1, the “explosion and dominance” of Content Management Systems–especially WordPress–has led to “a large influx of unskilled webmasters and service providers responsible for the deployment and administrations of these sites.” As such, DIY or low-cost WordPress websites are built using unsafe plugins and vulnerable themes, and are not properly maintained (e.g., updating the core and plugins to implement security patches as they’re released).

WordPress is the leading open-source CMS platforms on the market, leading in adoption by businesses of all sizes and everyday website owners. In all instances, regardless of platform, the leading cause of infection could be traced to the exploitation of software vulnerabilities in the platform’s extensible components, not its core. Extensible components directly relate to the integration of plugins, extensions, components, modules, templates, themes and other similar integrations. — Sucuri

So the problem isn’t WordPress itself, it’s how it’s put together and maintained. Expert WordPress developers like AndiSites use only known-safe, updateable themes and plugins. We encourage ongoing support and maintenance to ensure that sites are kept safe and running well. According to opens in a new windowWPBeginner, 83% of WordPress websites that get hacked are running an old version of the WordPress core.

Blogger Matt Banner has put together a  opens in a new windowthorough explanation of how to keep your WordPress website from being hacked, from the beginner to the professional level. He’s also created a great infographic (see below) to summarize the highlights, including tips to prevent WordPress vulnerabilities:


WordPress Security
Credit: opens in a new windowOn Blast Blog

Keep your site safe, and if you need help or advice, contact us. We’d love to help!