Is WordPress secure? We get asked this question over and over again. The answer: WordPress websites are just as secure or insecure as any other website. Because most of the time, mistakes in the absolute basics are the reason for a website being hacked. In this podcast episode, Steffen and Dominik discuss what the weak points of a WordPress website are and how you can protect yourself against a hack.
Highlights
00:00 Intro
00:20 Is WordPress secure?
02:52 Risk: Plugins and themes
08:14 Growing interest in WP security
09:54 Risk: Passwords
12:03 Plugin whitelist
12:43 Other measures to prevent hacking
14:22 Security plugins vs. infrastructure security
16:31 Important basics
17:19 Why external hosting service?
18:54 DoS attack of client website
21:00 „Random“ WordPress hacks
22:06 Prevent saving private data in WP
25:31 Security Plugins for WP
29:11 Monitoring with Visual Regression Tests
Links
WP Scan: https://wpscan.com/wordpress-security-scanner
Patchstack: https://patchstack.com/
VRTs: https://bleech.de/en/products/visual-regression-tests/
More Security Tips: https://bleech.de/en/blog/protect-website-from-hackers/

More from Bleech
Blog Posts (WordPress Development)
Flynt (WordPress Starter Theme)
VRTs (Visual Tests for WordPress)
Siegfried, deploy! (YouTube Channel)