Security
-
Preventing WP’s “Application Passwords” from being Abused
A recent finding shows that Rank Math (a SEO plugin) can create an Application Password that has Admin powers without user consent. Using that password, the application can install and activate plugins from WP.org repo, change settings, create admin users, and edit or delete content. To prevent this behavior (from any plugin), you can use…
-
Blocking OPML links in WordPress
WordPress exposes an OPML (Outline Processor Markup Language) file at: /wp-links-opml.php. This file lists blogroll links (a legacy WordPress feature) in a machine-readable format. OPML was designed to share link lists between feed readers and blogging tools. It’s a relic from early blogging workflows.
-
Disabling Concatenated Script Loading in WordPress
Disabling Concatenated Script Loading in WordPress to gain practical benefits.
-
WordPress Security in Good Hands
This handbook guides you through WordPress security by covering its foundations, current threats, practical hardening techniques, and real-world examples.
-
Secure Your wp-config.php for Stronger WordPress Protection
Three simple steps to secure your wp-config.php file and strengthen the overall security of your WordPress site.
-
Key Figures in the State of WordPress Security in 2025
96% of the vulnerabilities were uncovered in plugins, and 4% were found in themes. Only seven vulnerabilities were uncovered in WordPress core itself.
-
Setting up SSL certificate for your WordPress website, using Cloudflare
How to set up Cloudflare SSL for WordPress website running on Nginx.
-
How to connect to a Server via SSH
Steps to connect to an Ubuntu server via SSH on macOS, Linux, and Windows, using private keys and aliases.
-
Set up a proper Cron Job system for WordPress
Why you should replace WP-Cron with a system-level cron job for stronger security, greater reliability, and better performance.
-
How to Disable XML-RPC protocol in WordPress
Disable the XML-RPC protocol in WordPress to minimize security risks and enhance site performance.