Security Blog - ThreatSpot

WordPress Security Sep 12, 2026

We Just Scanned 18,068 WordPress Sites. Here’s What Failed.

47.0% was the average security score across 18,068 recent website security scans of small-business WordPress sites. Only 1.3% of scans earned an A-gra...

6 min Read more

WordPress Security Sep 04, 2026

Weak Cookie Security and Mixed Content Together Put WordPress Sites at Risk

Short Answer: Only 61.4% of small-business WordPress sites audited in the last 30 days achieved a “Good” mixed content rating, and just 81.5% passed a...

6 min Read more

WordPress Security Aug 30, 2026

Myth: 'WordPress Version Hiding Is Security Theater.' Reality: 1 in 5 Sites Leak Versions Used by Attackers

For years, many WordPress site owners have dismissed version hiding as a “security theater”—an action that only adds surface-level protection with lit...

5 min Read more

WordPress Security Aug 22, 2026

SSL/TLS Maturity Across 20,425 WordPress Sites: 4 Core Security Metrics

Here are four numbers that separate protected sites from exposed ones. This dashboard snapshot draws from 20,425 recent security scans across small-bu...

5 min Read more

WordPress Security Aug 20, 2026

Your Server Is Advertising Itself. 98.7% of Sites Do.

💥 98.7% of WordPress sites in recent scans failed the server banner security check, exposing details about their server software to anyone who asks.

6 min Read more

WordPress Security Aug 15, 2026

Version Exposure and Server Banner: How This Overlooked Duo Weakens WordPress Security

Short Answer: Version exposure and server banner leaks were among the most persistent, avoidable configuration gaps found in recent scans of small-bus...

7 min Read more

WordPress Security Aug 10, 2026

Alert: 99.8% of WordPress Sites Are Missing a Key XSS Protection Header

Short Answer: Out of 17,585 recent scans, 99.8% of small-business WordPress sites lacked a fully configured set of security headers, leaving a persist...

6 min Read more

WordPress Security Jul 29, 2026

TLS Protocols + SSL/TLS: A WordPress Security Dashboard

Here are four numbers that separate protected sites from exposed ones.

6 min Read more

WordPress Security Jul 19, 2026

WordPress Mixed Content: 38.1% of Sites Still Fail Clean HTTPS

📊 38.1% of scanned small-business WordPress sites failed the mixed content check. (Based on 65690 scans across 37513 unique small-business WordPress s...

5 min Read more

WordPress Security Jul 13, 2026

We Just Scanned 2,331 Entertainment WordPress Sites. Here’s What Failed.

63.1% of entertainment sites scanned earned a D or F in security configuration over the last 90 days. Out of 2,331 scans across 1,511 unique entertain...

5 min Read more

Stay updated on web security