Security Blog

Practical insights on website and WordPress security for busy teams.

Filters: Tag: wordpress Clear all

43 articles found

WordPress Security Sep 12, 2026

We Just Scanned 18,068 WordPress Sites. Here’s What Failed.

47.0% was the average security score across 18,068 recent website security scans of small-business WordPress sites. Only 1.3% of scans earned an A-gra...

6 min Read more

WordPress Security Sep 06, 2026

Myth: 'CSP Breaks My WordPress Site.' Reality: Almost No One Even Tries and Compatibility Isn’t the Issue.

For years, many small business WordPress owners have avoided implementing a Content Security Policy (CSP), citing fears that it will “break” their sit...

6 min Read more

WordPress Security Sep 04, 2026

Weak Cookie Security and Mixed Content Together Put WordPress Sites at Risk

Short Answer: Only 61.4% of small-business WordPress sites audited in the last 30 days achieved a “Good” mixed content rating, and just 81.5% passed a...

6 min Read more

WordPress Security Aug 30, 2026

Myth: 'WordPress Version Hiding Is Security Theater.' Reality: 1 in 5 Sites Leak Versions Used by Attackers

For years, many WordPress site owners have dismissed version hiding as a “security theater”—an action that only adds surface-level protection with lit...

5 min Read more

WordPress Security Aug 27, 2026

Alert: Weak TLS Protocols and SSL/TLS Together Put Sites at Risk

Short Answer: Only 5.9% of small-business WordPress sites achieved a "Good" SSL/TLS configuration in recent automated security scans. Weak TLS protoco...

7 min Read more

Security Research Aug 24, 2026

The Most Vulnerable WordPress Plugins: Popularity Isn't Safety

We ranked WordPress plugins by known CVE count. The most popular plugins aren't the most vulnerable — but the ones that are vulnerable are everywhere.

2 min Read more

WordPress Security Aug 22, 2026

SSL/TLS Maturity Across 20,425 WordPress Sites: 4 Core Security Metrics

Here are four numbers that separate protected sites from exposed ones. This dashboard snapshot draws from 20,425 recent security scans across small-bu...

5 min Read more

WordPress Security Aug 20, 2026

Your Server Is Advertising Itself. 98.7% of Sites Do.

💥 98.7% of WordPress sites in recent scans failed the server banner security check, exposing details about their server software to anyone who asks.

6 min Read more

WordPress Security Aug 17, 2026

Alert: Mixed Content Plagues 41.9% of HTTPS WordPress Sites

Short Answer: Across 19,851 HTTPS-enabled small business WordPress sites scanned over the last 30 days, 41.9% failed to meet the “Good” standard for m...

8 min Read more

Security Research Aug 17, 2026

Which Industries Have the Most Vulnerable WordPress Sites?

Our industry rankings show a clear pattern: the sectors handling the most sensitive data aren't always the best secured. See where your industry lands...

2 min Read more

Threat Alert Jul 27, 2026

🔴 CVE-2026-63030: High Exploit Probability — 98% Chance of Exploitation — WordPress Core

CVE-2026-63030 vulnerability alert with a 97% exploit probability, affecting WordPress Core.

1 min Read alert

Stay updated on web security

Get practical security tips and product updates delivered to your inbox.

Create Free Account Subscribe via RSS