Security Blog

Practical insights on website and WordPress security for busy teams.

Filters: Tag: plugin-security Clear all

33 articles found

WordPress Security Nov 01, 2026

ThreatSpot Weekly Digest

0.4% — Only 0.4% of 19,251 recent security header checks on small-business WordPress sites achieved a "Good" configuration (all required browser secur...

1 min Read more

WordPress Security Sep 28, 2026

9-Point WordPress Security Headers Checklist: What to Verify First

Executive summary: Security headers represent one of the simplest yet most frequently overlooked browser-based defenses for small business WordPress s...

6 min Read more

WordPress Security Sep 23, 2026

Myth: Finance WordPress Sites Are Low-Risk. Reality: 49.7% Fail Security Scans.

Finance website owners often believe their WordPress sites are safe by default. The logic sounds reasonable: payment gateways use their own PCI-compli...

6 min Read more

WordPress Security Sep 06, 2026

How Often Do Scanned WordPress Sites Have a Properly Configured CSP?

Between August 30, 2026 and September 29, 2026, ThreatSpot scans observed a fully configured Content-Security-Policy header on fewer than one in a tho...

5 min Read more

WordPress Security Aug 30, 2026

Myth: 'WordPress Version Hiding Is Security Theater.' Reality: 1 in 5 Sites Leak Versions Used by Attackers

For years, many WordPress site owners have dismissed version hiding as a “security theater”—an action that only adds surface-level protection with lit...

5 min Read more

WordPress Security Aug 22, 2026

SSL/TLS Maturity Across 20,425 WordPress Sites: 4 Core Security Metrics

Here are four numbers that separate protected sites from exposed ones. This dashboard snapshot draws from 20,425 recent security scans across small-bu...

5 min Read more

WordPress Security Aug 17, 2026

Alert: Mixed Content Plagues 41.9% of HTTPS WordPress Sites

Short Answer: Across 19,851 HTTPS-enabled small business WordPress sites scanned over the last 30 days, 41.9% failed to meet the “Good” standard for m...

8 min Read more

WordPress Security Aug 10, 2026

Alert: 99.8% of WordPress Sites Are Missing a Key XSS Protection Header

Short Answer: Out of 17,585 recent scans, 99.8% of small-business WordPress sites lacked a fully configured set of security headers, leaving a persist...

6 min Read more

WordPress Security Aug 01, 2026

We Just Scanned 22,928 WordPress Sites. Here’s What Failed.

Across 22,928 recent WordPress security scans, only 0.6% of sites earned an A-grade, while 75.2% landed in the D or F range—a stark signal that the sm...

7 min Read more

WordPress Security Jul 29, 2026

TLS Protocols + SSL/TLS: A WordPress Security Dashboard

Here are four numbers that separate protected sites from exposed ones.

6 min Read more

No threat alerts match your filters.

Stay updated on web security

Get practical security tips and product updates delivered to your inbox.

Create Free Account Subscribe via RSS