This article was originally published on Oct. 15, 2018, and updated on April 8, 2021.
An above-average blog security setup for WordPress can be handled with a couple of plugins — it’s good enough to stop most of hacking attempts, but it’s not an iron-clad approach. Someone who’s really determined might still find their way in.
Better blog security involves taking several steps using things like plugins, complex passwords and a few best practices.
I’ve been called in to clean up a couple blogs, but we were able to undo the damage that had been done — mostly spam links that had been injected into several blog posts for a black-hat SEO attack — but they wouldn’t have happened if the owner had practiced strong blog security to begin with. We could clean out the links by hand, which would have taken hours. Instead, we had to restore the blog … Read the rest