Articles
WordPress security articles
Plain-spoken WordPress security articles: what attackers actually do, what to switch on, and what to do when something goes wrong.
RSS FeedLatest WordPress security articles
WordPress Nonce: What It Is and How to Use It Correctly
A WordPress nonce is a short-lived token that proves a request came from your own page. Here is how to create and verify one, what it does not protect, and why caching breaks it.
Read articleJapanese Keyword Hack: How to Spot It, Clean It Up and Keep It Gone
Hundreds of Japanese product pages are indexed under your domain and you never made them. Here is what the Japanese keyword hack is and how to clean it up step by step.
Read articleWordPress Plugin Vulnerabilities: What They Are and How to Stay Safe
Most WordPress break-ins start with a plugin or theme, not WordPress itself. Here is how the weak spots work, how fixes reach you, and a calm routine for staying ahead of them.
Read articleWordPress Auto Logout: How to Sign Out Idle Users
WordPress keeps people signed in for days by default. Here is how WordPress auto logout works, how to shorten it with code or a plugin, and how to end a session you do not trust.
Read articleThis Site May Be Hacked: How to Remove Google's Warning
Google has put 'This site may be hacked' next to your listing. Here is what it means, how to confirm it in Search Console, and how to clean up and ask Google to take it off.
Read articleWordPress Backdoor: How to Find and Remove One
A WordPress backdoor is a hidden way back into your site that survives a cleanup. Here are the eight forms it takes, how to hunt for each, and how to remove it for good.
Read articleWooCommerce Security Checklist for Store Owners
You do not need to be technical to protect a shop. Work through this WooCommerce security checklist: payments, staff access, customer accounts, card testing, backups and updates.
Read articleWordPress User Roles: What Each One Can Do and Who Gets What
WordPress user roles decide who can publish, who can install plugins and who can take the whole site over. Here is what each role can do and how to hand them out safely.
Read articleWordPress White Screen of Death: Causes and Fixes
A blank page is alarming but usually simple. Here is how to fix the WordPress white screen of death in a calm order, and when restoring a backup is the faster route.
Read articleGet new articles by email
One short email when a new article is out, plus the WordPress threats worth knowing about. No spam, unsubscribe any time.
Questions
WordPress security articles: questions
Who writes these WordPress security articles?
The Stack Mode team, who build Stack Guard and look after client WordPress sites every day. Each article is checked against how WordPress and Stack Guard really work.
Do I need Stack Guard to use the advice in these articles?
No. Every article explains the problem and the manual fix first. Where Stack Guard can do it for you, the article says how and on which plan.
How do I hear about new WordPress security articles?
Subscribe with the form on this page, or follow the RSS feed. One short email per new article, no spam.