Security Blog - ThreatSpot

WordPress Security Sep 12, 2026

We Just Scanned 18,068 WordPress Sites. Here’s What Failed.

47.0% was the average security score across 18,068 recent website security scans of small-business WordPress sites. Only 1.3% of scans earned an A-gra...

6 min Read more

WordPress Security Aug 30, 2026

Myth: 'WordPress Version Hiding Is Security Theater.' Reality: 1 in 5 Sites Leak Versions Used by Attackers

For years, many WordPress site owners have dismissed version hiding as a “security theater”—an action that only adds surface-level protection with lit...

5 min Read more

WordPress Security Aug 20, 2026

Your Server Is Advertising Itself. 98.7% of Sites Do.

💥 98.7% of WordPress sites in recent scans failed the server banner security check, exposing details about their server software to anyone who asks.

6 min Read more

WordPress Security Jun 05, 2026

13-Point Content Security Policy Checklist for WordPress Site Owners

A practical, evidence-led guide: why nearly all small-business WordPress sites lack effective browser-side content security—and what to do next.

8 min Read more

Plugin Security May 27, 2026

When Did You Last Check Your WordPress Plugins? A 17-Point Plugin Security Checklist for Small Businesses

Last month, 58,558 scans across 50,281 unique small-business WordPress sites revealed a hard truth: 45.9% failed the most basic website security check...

9 min Read more

We Just Scanned 18,068 WordPress Sites. Here’s What Failed.

Myth: 'WordPress Version Hiding Is Security Theater.' Reality: 1 in 5 Sites Leak Versions Used by Attackers

Your Server Is Advertising Itself. 98.7% of Sites Do.

13-Point Content Security Policy Checklist for WordPress Site Owners

When Did You Last Check Your WordPress Plugins? A 17-Point Plugin Security Checklist for Small Businesses

Stay updated on web security