WORDPRESS HACKED??? Check out the Security Measures...
Posted: Mon Jan 19, 2015 12:57 pmWordPress security is serious business. Exploits of vulnerabilities in WordPress architecture have led to mass compromises of servers through cross-site contamination. WordPress extensibility increases its vulnerability; plugins and themes house flawed logic, loopholes, Easter eggs, backdoors and a slew of other issues.
In June 2013, it was found that some of the 50 most downloaded WordPress plugins were vulnerable to common Web attacks such as SQL injection and XSS. A separate inspection of the top-10 e-commerce plugins showed that 7 of them were vulnerable.
In Jul 2014, plug-in for WordPress actively targeted by hackers and was used to compromise an estimated 50,000 sites.
With that in mind, here are 10 things you can do to improve your WordPress security.
1. Use secure hosting
2. Update all the things
3. Strengthen up those passwords
4. Never use “admin” as your username
5. Hide your username from the author archive URL
6. Limit Login Attempts
7. Disable file editing via the dashboard
8. Try to avoid free themes
9. Keep a backup
10. Use security plugins
Individual installations of WordPress can be protected with security plugins.Users can also protect their WordPress installations by taking steps such as keeping all WordPress installation, themes, and plugins updated, using only trusted themes and plugins,editing the site's .htaccess file to prevent many types of SQL injection attacks and block unauthorized access to sensitive files.
Developers can also use tools to analyze potential vulnerabilities, including Wordpress Auditor or Wordpress Sploit Framework developed by 0pc0deFR. These types of tools research known vulnerabilities, such as a XSS or SQL injection. Some vulnerabilities can not be detected by the tools, so it is advisable to check the code from other developers.
In June 2013, it was found that some of the 50 most downloaded WordPress plugins were vulnerable to common Web attacks such as SQL injection and XSS. A separate inspection of the top-10 e-commerce plugins showed that 7 of them were vulnerable.
In Jul 2014, plug-in for WordPress actively targeted by hackers and was used to compromise an estimated 50,000 sites.
With that in mind, here are 10 things you can do to improve your WordPress security.
1. Use secure hosting
2. Update all the things
3. Strengthen up those passwords
4. Never use “admin” as your username
5. Hide your username from the author archive URL
6. Limit Login Attempts
7. Disable file editing via the dashboard
8. Try to avoid free themes
9. Keep a backup
10. Use security plugins
Individual installations of WordPress can be protected with security plugins.Users can also protect their WordPress installations by taking steps such as keeping all WordPress installation, themes, and plugins updated, using only trusted themes and plugins,editing the site's .htaccess file to prevent many types of SQL injection attacks and block unauthorized access to sensitive files.
Developers can also use tools to analyze potential vulnerabilities, including Wordpress Auditor or Wordpress Sploit Framework developed by 0pc0deFR. These types of tools research known vulnerabilities, such as a XSS or SQL injection. Some vulnerabilities can not be detected by the tools, so it is advisable to check the code from other developers.
