Are you up to date with your WordPress security? Here’s what you need to know.
According to Sucuri’s Website Hacked Trend Report 2016 – Q1, the “explosion and dominance of Content Management Systems has led to a large influx of unskilled webmasters and service providers responsible for the deployment and administrations of these sites.”
As such, many DIY or low-cost WordPress websites are built using unsafe plugins and vulnerable themes. These sites may not be particularly well maintained – especially with outdated core and plugins.
WordPress is the leading open-source CMS platforms on the market, leading in adoption by businesses of all sizes and everyday website owners. In all instances, regardless of platform, the leading cause of infection could be traced to the exploitation of software vulnerabilities in the platform’s extensible components, not its core. Extensible components directly relate to the integration of plugins, extensions, components, modules, templates, themes and other similar integrations. — Sucuri
How do we keep our site secure?
Expert WordPress developers like AndiSites use only known-safe, updateable themes and plugins. We encourage ongoing support and maintenance to ensure that sites are keeping safe and running well.
According to WPBeginner, 83% of hacked WordPress websites are running an old version of the WordPress core.
Blogger Matt Banner provides a thorough explanation of how to keep your WordPress website clear of hackers, from the beginner to the professional level. Here’s a summary:
- Update WordPress to the latest version
- Backup regularly
- Don’t use “admin” as your username
- Don’t have a “Login” link on your site that goes to the back-end (use /wp-admin only)
- Use a reliable hosting company (we highly recommend SiteGround)
- Use trustworthy plugins and keep them updated
- Use a security plugin (a service like Sucuri.net)
- Make sure your passwords are strong (we like Strong Password Generator)
- Use a CDN firewall (reputable hosting providers provide CloudFlare at no or low cost)
Keep your site safe, and if you need help or advice, contact us. We’d love to help!