What Happens If You Never Update Your WordPress Site
A neglected WordPress site does not break the day you stop updating. It breaks eighteen months later, all at once. Here is the actual sequence.
WordPress Security
Malware cleanup, hack recovery, hardening and keeping a WordPress install out of trouble.
Your Backup Is Not a Backup Until You Have Restored It
Everyone has backups. Almost nobody has restored one. The first time you find out whether it works should not be the day you need it.
How to Vet a WordPress Plugin Before You Install It
A plugin you trusted for years can change hands, change owners or change behaviour. Here is how to read a plugin before installing, and how to audit the ones already running.
WordPress 7.0.4 and the Question Nobody Asks About Security Releases
A remote code execution fix landed for every WordPress branch back to 4.7. Whether it was an emergency for you depends on two specific conditions most coverage skips.
My WordPress Site Was Hacked: The Exact Cleanup Process We Use
Japanese characters in your search results, redirects you did not add, or a suspended hosting account. Here is the order to clean a compromised WordPress site so it stays clean.