PHP2Shell: what WordPress site owners need to know
Two critical flaws in PHP itself, known as PHP2Shell, let attackers run code on unpatched servers before WordPress even loads. Here is what happened and what to check.
-
-
Cheap hosting vs. managed WordPress hosting: what you are really paying for
A few dollars a month for hosting sounds like a bargain until the site is slow, down or hacked. Here is what changes when you move to managed WordPress hosting.
-
Who has admin access to your WordPress site?
Old logins from past developers, shared passwords and accounts nobody remembers creating are an easy way in. Here is how to tidy up access to your site.
-
What a real WordPress backup plan looks like
“We have backups” is not the same as being able to get your site back. Here is what a backup plan needs to actually work when you need it.
-
Why is my WordPress site slow? The usual suspects
A slow website loses visitors and leads. These are the most common reasons a WordPress site slows down, starting with the easiest to fix.
-
7 signs your WordPress site has been hacked
Hacked WordPress sites often look completely normal to their owners. These are the warning signs we see most often, and what to do if you spot one.
-
How many WordPress plugins is too many?
There is no magic number of plugins. What matters is which ones you run, who maintains them and whether you still need them.
-
Why WordPress updates break sites, and how we test them first
Most WordPress breakages happen right after an update. Here is why, and the simple process that keeps updates from taking your site down.
Not sure where your site stands?
Get a free WordPress health check. We'll send you a short report with the fixes we'd make first.