-
Recent Posts
- “My Partner Wants to Use WordPress Because 50% of the Web Uses It. Help!”
- Does EmDash Solve WordPress’s Problems, or Do You Need UltimateWB?
- How Not to Use AI: Stanford University Can Tell You
- Best Website Builder for SEO: WordPress vs. Wix vs. UltimateWB
- How to Make Sure Your Website Colors Have Enough Contrast for Accessibility
- Mobile-Friendly Website Checklist: 20 Things to Check
- Beehiiv Website Builder Review: The Problem Isn’t the Design – It’s the Lack of Control
- Elementor’s “Angie” AI Is More Than Bloat: Credits, Subscriptions, and a Growing Platform Problem
- How to Pass Google Business Profile Video Verification for Service Businesses
- The Great Deskilling: Why AI Dependence is Turning Developers into Prompt Babysitters
- The Three-Month Fuse: The Everest Forms Pro Attack and Why a Patched Plugin Can Still Put Websites at Risk
- Computer Screen Has Black Bars on the Sides: How to Fix It
- Could AI Make Humans Extinct Within the Next Decade?
- Is Weebly Getting Out of the Website-Builder Business?
- Are You “Leaking SEO” by Linking to Other Websites?
- Wix Harmony Is Now in Google Gemini. So Why Are Users Still Complaining?
- When AI Sounds Confident but Gets It Wrong: The Mount Shasta Rescue
- When AI Agents Start Working Together, Who Is Really in Control?
Categories
Tag Archives: supply chain attacks
Over 1.6 Million WordPress Sites Hit: The OptinMonster and ShapedPlugin Supply Chain Attacks
For years, the gold-standard advice for WordPress website security has been simple: If you want to keep your site safe, stick to major, highly reputable brand names. A massive company has the infrastructure, team, and budget to audit their code and protect your perimeter.
But recent events have exposed a massive flaw in that logic.
When hackers shift from attacking individual sites to targeting the software creators themselves, relying on a big brand's reputation no longer guarantees safety. In fact,
... Continue reading
Posted in Compare Website Builders, Technology in the News, Website Security
Tagged 2FA, Awesome Motive, backdoor, cdn, database, Easy Digital Downloads, javascript, MalCare, malware, optinmonster, php, Product Slider, PushEngage, Real Testimonials Pro, shapedplugin, Smart Post Show Pro, supply chain attacks, TOTP, updraftplus, vulnerability, woocommerce, wordfence, Wordfence Login Security, WordPress, WP 2FA
Leave a comment
Is WordPress secure and easy to use?
Ask David! question: I'm thinking of using WordPress for blogging, but worried because my friends' WordPress websites keep getting hacked or broken all the time - I'm questioning if it's actually secure, easy to use?
To keep a basic WordPress site secure, you need to use a strong admin password and keep the core software updated to the newest version. However, two major structural factors make securing a WordPress site a continuous challenge:
- The Open-Source Reality: Because WordPress is open
Posted in Ask David!
Tagged alternative to WordPress, backdoor scandal, blogging, easy to use, fatal errors, forced updates, maintenance, plugin compatibility issues, plugins, security, security issues, supply chain attacks, third-party plugins, whitescreen crashes, WordPress, wordpress easy to use, wordpress security
Leave a comment