WordPress Security – Should you be concerned?

Being a developer, I recently started to specialise in WordPress based corporate websites. I never had any security problems at my current host, BlueHost, but one of my customer’s website is constantly under attack. Mostly Javascript code being injected.Why? Passwords too short, .htaccess missing, no security plugins…It’s not that hard to put some basic security. I have found these plugins to be pretty useful:

• Bulletproof Security
  Bulletproof Security creates a more secure .htaccess that prevents XSS attacks.
• WP-Scanner
  Scans files and detects suspicious portions of scripts.

There is also an online scanner, that’s running free scan for the moment. Worth a try:

https://www.sitesecuritymonitor.com

Share