Comments on: WordPress Security Plugins

By: Chris

Chris — Fri, 26 Mar 2010 15:39:13 +0000

My WordPress blog has been attacked by spambots recently. Do you have any other suggestions in addition to #5 above, or will that be enough protection?

By: skornik-security

skornik-security — Tue, 23 Mar 2010 13:25:32 +0000

Security is the no.1 issue today when talking about computers and information on the web.

By: 4 drawer filing cabinet

4 drawer filing cabinet — Sat, 20 Mar 2010 11:30:54 +0000

A specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoyin, luckily there are new security plug ins being developed to prevent this.

By: home based business online

home based business online — Thu, 04 Mar 2010 15:05:49 +0000

I also have a WordPress blog and I use to have a big problem with the huge number of spam comments. I will try to add WP Security Scan and Invisible Defender.

By: AngLoloMo

AngLoloMo — Tue, 09 Feb 2010 15:37:28 +0000

Yeah! My site was attack late good thing its back in shape already

By: Dan Nedelko

Dan Nedelko — Fri, 18 Dec 2009 16:56:44 +0000

@Dr Laraine – anytime I hope these help you out. Let me know how they work for you. Some have likely been updated, I’m thinking this post might also need a refresh since it seems pretty popular.

By: Dr Laraine

Dr Laraine — Fri, 18 Dec 2009 16:50:35 +0000

Thanks, Dan, for these security suggestions. We will be installing some of these plugins!

By: Dan Nedelko

Dan Nedelko — Thu, 17 Dec 2009 00:07:22 +0000

I totally agree with that one. It definitely would cut out a good number of scripts and injection attacks that aren’t sophisticated.

By: Wordpress Fan

Wordpress Fan — Tue, 15 Dec 2009 19:45:02 +0000

Another great security suggestion that I follow is to try and remove any reference to WordPress on your pages, in your code, and in urls. Of course someone who knows what they are looking for will be able to tell if it is a WordPress blog or not, but they will have to make a little extra effort to figure it out.

By: Felix

Felix — Mon, 09 Nov 2009 10:40:27 +0000

Great points here and also don’t forget to upgrade to the latest version of WordPress. Usually exploits or malware injections happen to some security hole left unguarded by WP.