wp data breach - What is ℹ️ Data breach (information disclosure) and How to prevent WordPress information disclosure

What is ℹ️ Data breach (information disclosure) and How to prevent WordPress information disclosure

Information disclosure, also known as data breach is the unintentional exposure of sensitive information. This sensitive information can be anything from technical information such as plugin versions or hosting plan limits, to users information that should not be made public. Information disclosure is not a hack but allows an attacker to obtain sensitive information that … Read full article →

Adding high performance keys to MySQL tables to speed up WordPress - Adding high-performance keys to MySQL tables to speed up WordPress 🧑🏿‍🚀

Adding high-performance keys to MySQL tables to speed up WordPress 🧑🏿‍🚀

wp_postmeta table should be the biggest table in your database, if not, there is a problem. Read wp_actionscheduler_actions & wp_actionscheduler_logs tables When you install WordPress for the first time, tables are created in the database, for example for the wp_postmeta table: the problem? solution: On an existing tables, We can add high-performance keys that match … Read full article →

wp lfi - What is 🗄️ File inclusion and How to prevent WordPress file inclusion attacks

What is 🗄️ File inclusion and How to prevent WordPress file inclusion attacks

File inclusion vulnerabilities allow an attacker to read (and sometimes execute) files on the WordPress website, gain unauthorized access to sensitive information and inject malicious files through the “include” functionality. This can be very dangerous because if the webserver is misconfigured the attacker may gain access to sensitive user information and even execute arbitrary commands. There … Read full article →

sec checkpoints for wp website - 4 Security Checkpoints for your WordPress Website

4 Security Checkpoints for your WordPress Website

Security is a result of security “practices” rather than plugin “functionality”. No security plugin is perfect, but we make do, and that, like everything else in life, is what defines the outcome. Here’s a simple diagram of how an attacker tries to get inside your website. There are 4 levels that each request has to … Read full article →

prevent xss - ⚠️ What is Cross-site scripting (XSS) and How to prevent WordPress XSS attacks

⚠️ What is Cross-site scripting (XSS) and How to prevent WordPress XSS attacks

The most regularly seen attack type is script injection (XSS attack), rogue scripts are injected into the webpage for malicious purposes. This includes redirects to third-party websites, collecting user data, downloading malware to visitors, etc. WordPress has a bunch of useful developer functions that are used to sanitize data (Validating Sanitizing and Escaping User Data) … Read full article →