If you want to secure your WordPress site, you will find a lot of advice online, some of which is good, and some outright damaging, albeit well-meaning.  When it comes to WordPress security, you need to be able to trust your sources and find information that is not only credible, but also feasible and applicable….

WordPress XSS or cross-site scripting attacks are the most common WordPress attack mechanisms today. They target visitors of your website, wanting to steal their information. The worst part of XSS attacks is that attackers use vulnerabilities on your WordPress website to do this. Protect your visitors from XSS attacks by installing a WordPress firewall.  On…

SQL injections are some of the most devastating attacks on WordPress sites. In fact, they are rated second on the list of most critical WordPress vulnerabilities, second only to cross-site scripting attacks. A WordPress SQL injection lets a hacker gain access to your site database, and thereafter flood your site with malware. If you suspect…

Wordfence always crops up in any WordPress security plugins comparison, with a great free version that can mostly protect a website from malware. It isn’t perfect though, so a question arises: will Wordfence premium do a better job?  If you are contemplating Wordfence free vs premium, you’ve come to the right place. We’ve tested out…

Is your WordPress login secure?  WordPress in itself is very secure, and is only prone to attacks because of its wide popularity. Having said that, securing your WordPress site is extremely important as web attacks are a serious issue for any website.  A common gateway for hackers is your WordPress login page. Brute force attacks…

When your WordPress site gets hacked, one of the most common culprits is your password.  While no site is completely hack-proof, your WordPress password security makes a big difference when it comes to securing your website.  The two most common mistakes people make when it comes to their passwords are to rely on something they…