Security Blog

Practical insights on website and WordPress security for busy teams.

Filters: Tag: content-security-policy Clear all

39 articles found

WordPress Security Nov 01, 2026

ThreatSpot Weekly Digest

0.4% — Only 0.4% of 19,251 recent security header checks on small-business WordPress sites achieved a "Good" configuration (all required browser secur...

1 min Read more

WordPress Security Sep 28, 2026

9-Point WordPress Security Headers Checklist: What to Verify First

Executive summary: Security headers represent one of the simplest yet most frequently overlooked browser-based defenses for small business WordPress s...

6 min Read more

WordPress Security Sep 23, 2026

Myth: Finance WordPress Sites Are Low-Risk. Reality: 49.7% Fail Security Scans.

Finance website owners often believe their WordPress sites are safe by default. The logic sounds reasonable: payment gateways use their own PCI-compli...

6 min Read more

WordPress Security Sep 12, 2026

We Just Scanned 18,068 WordPress Sites. Here’s What Failed.

47.0% was the average security score across 18,068 recent website security scans of small-business WordPress sites. Only 1.3% of scans earned an A-gra...

6 min Read more

WordPress Security Sep 06, 2026

How Often Do Scanned WordPress Sites Have a Properly Configured CSP?

Between August 30, 2026 and September 29, 2026, ThreatSpot scans observed a fully configured Content-Security-Policy header on fewer than one in a tho...

5 min Read more

WordPress Security Sep 04, 2026

Weak Cookie Security and Mixed Content Together Put WordPress Sites at Risk

Short Answer: Only 61.4% of small-business WordPress sites audited in the last 30 days achieved a “Good” mixed content rating, and just 81.5% passed a...

6 min Read more

WordPress Security Aug 22, 2026

SSL/TLS Maturity Across 20,425 WordPress Sites: 4 Core Security Metrics

Here are four numbers that separate protected sites from exposed ones. This dashboard snapshot draws from 20,425 recent security scans across small-bu...

5 min Read more

WordPress Security Aug 17, 2026

Alert: Mixed Content Plagues 41.9% of HTTPS WordPress Sites

Short Answer: Across 19,851 HTTPS-enabled small business WordPress sites scanned over the last 30 days, 41.9% failed to meet the “Good” standard for m...

8 min Read more

WordPress Security Aug 15, 2026

Version Exposure and Server Banner: How This Overlooked Duo Weakens WordPress Security

Short Answer: Version exposure and server banner leaks were among the most persistent, avoidable configuration gaps found in recent scans of small-bus...

7 min Read more

WordPress Security Aug 10, 2026

Alert: 99.8% of WordPress Sites Are Missing a Key XSS Protection Header

Short Answer: Out of 17,585 recent scans, 99.8% of small-business WordPress sites lacked a fully configured set of security headers, leaving a persist...

Stay updated on web security