-
Recent Posts
- Thinking About Switching From WordPress? What Should You Consider Before You Move?
- The Airtable Acquisition Raises a Bigger Question: Do You Really Own the Software Your Business Runs On?
- How to Use Google Search Console’s New Generative AI Data to Improve Your SEO
- How to Update the Same Website Content on Multiple Pages at Once
- Discovered vs. Crawled Not Indexed in Google Search Console: What’s the Difference and How to Fix Each
- The Small Business Guide to Auditing Google Ads and Website Costs
- Do Professional Writers Still Need SEO in the Age of AI?
- Search Engine First vs. People First Content: Why Generic FAQ Dumps Harm Your SEO
- Looking for a Website Builder Without AI? Which One Should You Choose?
- Keyword Cannibalization: How to Find and Fix the Pages Stealing Your Own Google Traffic
- Why Great Content Gets Stuck on Page 8 (And How to Fix It)
- Why MySQL FULLTEXT Search Returns 0 Results (And How to Fix It)
- The Reality of Domain Speculation on New TLD Launches: Is It Still Worth It?
- The Hidden Domain Name Lock-In: Which Registrars Restrict Nameservers?
- Paying $10,000 a Month for SEO? Here’s How to Tell If You’re Getting Your Money’s Worth
- Introducing New WordPress Magazine Layouts in UltimateWB 9 (With Early Access)
- How to Fix the WordPress “Critical Error” on the Widgets Page After a PHP Upgrade
- The Hidden Risk of SaaS Website Builders: Lessons from the Recent Wix Outage
Categories
Tag Archives: supply chain attacks
Over 1.6 Million WordPress Sites Hit: The OptinMonster and ShapedPlugin Supply Chain Attacks
For years, the gold-standard advice for WordPress website security has been simple: If you want to keep your site safe, stick to major, highly reputable brand names. A massive company has the infrastructure, team, and budget to audit their code and protect your perimeter.
But recent events have exposed a massive flaw in that logic.
When hackers shift from attacking individual sites to targeting the software creators themselves, relying on a big brand's reputation no longer guarantees safety. In fact,
... Continue reading
Posted in Compare Website Builders, Technology in the News, Website Security
Tagged 2FA, Awesome Motive, backdoor, cdn, database, Easy Digital Downloads, javascript, MalCare, malware, optinmonster, php, Product Slider, PushEngage, Real Testimonials Pro, shapedplugin, Smart Post Show Pro, supply chain attacks, TOTP, updraftplus, vulnerability, woocommerce, wordfence, Wordfence Login Security, WordPress, WP 2FA
Leave a comment
Is WordPress secure and easy to use?
Ask David! question: I'm thinking of using WordPress for blogging, but worried because my friends' WordPress websites keep getting hacked or broken all the time - I'm questioning if it's actually secure, easy to use?
To keep a basic WordPress site secure, you need to use a strong admin password and keep the core software updated to the newest version. However, two major structural factors make securing a WordPress site a continuous challenge:
- The Open-Source Reality: Because WordPress is open
Posted in Ask David!
Tagged alternative to WordPress, backdoor scandal, blogging, easy to use, fatal errors, forced updates, maintenance, plugin compatibility issues, plugins, security, security issues, supply chain attacks, third-party plugins, whitescreen crashes, WordPress, wordpress easy to use, wordpress security
Leave a comment