PHP2Shell: what WordPress site owners need to know
Two critical flaws in PHP itself, known as PHP2Shell, let attackers run code on unpatched servers before WordPress even loads. Here is what happened and what to check.
-
-
Who has admin access to your WordPress site?
Old logins from past developers, shared passwords and accounts nobody remembers creating are an easy way in. Here is how to tidy up access to your site.
-
7 signs your WordPress site has been hacked
Hacked WordPress sites often look completely normal to their owners. These are the warning signs we see most often, and what to do if you spot one.
Not sure where your site stands?
Get a free WordPress health check. We'll send you a short report with the fixes we'd make first.