{"id":11412,"date":"2026-10-31T07:44:18","date_gmt":"2026-10-31T06:44:18","guid":{"rendered":"https:\/\/hordanso.net\/wordpress-and-website-security-maintenance-checklist\/"},"modified":"2026-10-31T07:44:18","modified_gmt":"2026-10-31T06:44:18","slug":"wordpress-and-website-security-maintenance-checklist","status":"publish","type":"post","link":"https:\/\/hordanso.net\/en-za\/wordpress-and-website-security-maintenance-checklist\/","title":{"rendered":"WordPress and Website Security Maintenance Checklist"},"content":{"rendered":"\n<style data-wp-block-html=\"css\">\n.hordanso-blog {\n  max-width: 850px;\n  margin: 0 auto;\n  font-family: 'Inter', Arial, sans-serif;\n  line-height: 1.75;\n  color: #1a1a1a;\n  padding: 20px;\n}\n.blog-header { margin-bottom: 8px; }\n.hordanso-blog .eyebrow {\n  display: inline-block;\n  font-size: 13px;\n  font-weight: 700;\n  letter-spacing: 0.06em;\n  text-transform: uppercase;\n  color: #fe5a53;\n  margin-bottom: 10px;\n}\n.hordanso-blog h1 {\n  font-size: 36px;\n  line-height: 1.25;\n  margin: 0 0 18px;\n  color: #111;\n  font-weight: 800;\n}\n.hordanso-blog .lead {\n  font-size: 18px;\n  color: #444;\n  margin-bottom: 28px;\n}\n.hordanso-blog h2 {\n  margin-top: 46px;\n  margin-bottom: 16px;\n  font-size: 24px;\n  font-weight: 700;\n  color: #111;\n  padding-bottom: 10px;\n  border-bottom: 2px solid #f1f1f1;\n}\n.hordanso-blog p {\n  margin-bottom: 16px;\n  font-size: 16px;\n  color: #2a2a2a;\n}\n.hordanso-blog a { color: #fe5a53; text-decoration: underline; }\n.hordanso-blog a:hover { color: #e94d46; }\n.hordanso-blog code {\n  background: #f6f6f6;\n  border: 1px solid #ececec;\n  border-radius: 5px;\n  padding: 1px 6px;\n  font-size: 14px;\n}\n\n.hordanso-blog ul,\n.hordanso-blog ol {\n  padding-left: 4px;\n  margin-bottom: 22px;\n  list-style: none;\n}\n.hordanso-blog .numbered-list {\n  counter-reset: step-counter;\n  padding-left: 0;\n}\n.hordanso-blog .numbered-list li {\n  counter-increment: step-counter;\n  position: relative;\n  padding-left: 44px;\n  margin-bottom: 14px;\n}\n.hordanso-blog .numbered-list li::before {\n  content: counter(step-counter);\n  position: absolute;\n  left: 0;\n  top: 0;\n  width: 28px;\n  height: 28px;\n  background: #fe5a53;\n  color: #fff;\n  border-radius: 50%;\n  font-size: 14px;\n  font-weight: 700;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n}\n.hordanso-blog .check-list li {\n  position: relative;\n  padding-left: 30px;\n  margin-bottom: 12px;\n}\n.hordanso-blog .check-list li::before {\n  content: \"2713\";\n  position: absolute;\n  left: 0;\n  top: 1px;\n  width: 20px;\n  height: 20px;\n  background: #e8f7ee;\n  color: #1fa855;\n  border-radius: 50%;\n  font-size: 12px;\n  font-weight: 700;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  line-height: 1;\n}\n\n.table-wrap {\n  overflow-x: auto;\n  margin: 22px 0 32px;\n  border-radius: 12px;\n  border: 1px solid #ececec;\n}\n.hordanso-blog table {\n  width: 100%;\n  border-collapse: collapse;\n  font-size: 15px;\n  min-width: 480px;\n}\n.hordanso-blog th,\n.hordanso-blog td {\n  padding: 14px 16px;\n  text-align: left;\n  border-bottom: 1px solid #f0f0f0;\n}\n.hordanso-blog th {\n  background: #fafafa;\n  font-weight: 700;\n  color: #111;\n  font-size: 14px;\n}\n.hordanso-blog tbody tr:last-child td { border-bottom: none; }\n.hordanso-blog tbody tr:hover { background: #fcfcfc; }\n\n.compare-table .cell-good { color: #146c3f; }\n.compare-table .cell-bad { color: #8a2e2e; }\n.compare-table thead th:first-child { background: #eefaf3; color: #146c3f; }\n.compare-table thead th:last-child { background: #fdeeee; color: #8a2e2e; }\n\n.audit-table .q-col { width: 66%; }\n.audit-table .icon-col { text-align: center; width: 17%; }\n.audit-table th.icon-col { color: #444; font-size: 14px; }\n\n.icon {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 26px;\n  height: 26px;\n  border-radius: 50%;\n  font-size: 14px;\n  font-weight: 800;\n  line-height: 1;\n}\n.icon-yes { background: #e8f7ee; color: #1fa855; }\n.icon-no { background: #fdecec; color: #e54848; }\nth .icon { width: 18px; height: 18px; font-size: 11px; margin-right: 4px; vertical-align: middle; }\n\n.cta-inline { margin: 24px 0 8px; }\n.cta-box {\n  margin: 32px 0;\n  padding: 28px 24px;\n  border: 1px solid #f0e3e2;\n  background: #fff8f7;\n  border-radius: 14px;\n  text-align: center;\n}\n.cta-box p { margin-bottom: 14px; font-size: 17px; }\n\n.hordanso-blog .cta-button,\n.hordanso-blog .cta-button:visited {\n  display: inline-flex;\n  align-items: center;\n  gap: 8px;\n  padding: 14px 26px;\n  text-decoration: none !important;\n  font-weight: 700;\n  font-size: 15px;\n  border-radius: 8px;\n  background: #fe5a53 !important;\n  color: #ffffff !important;\n  border: 2px solid #fe5a53;\n  transition: all 0.2s ease;\n  white-space: nowrap;\n}\n.hordanso-blog .cta-button:hover {\n  background: #e94d46 !important;\n  border-color: #e94d46;\n  color: #ffffff !important;\n  text-decoration: none !important;\n  transform: translateY(-2px);\n  box-shadow: 0 8px 18px rgba(254, 90, 83, 0.28);\n}\n.hordanso-blog .cta-button .cta-arrow {\n  transition: transform 0.2s ease;\n}\n.hordanso-blog .cta-button:hover .cta-arrow {\n  transform: translateX(3px);\n}\n.hordanso-blog .cta-button.cta-outline {\n  background: #ffffff !important;\n  color: #fe5a53 !important;\n}\n.hordanso-blog .cta-button.cta-outline:hover {\n  background: #fff3f2 !important;\n  color: #e94d46 !important;\n}\n\n.multi-cta {\n  display: flex;\n  flex-wrap: wrap;\n  justify-content: center;\n  align-items: center;\n  gap: 16px;\n  margin: 40px 0;\n  padding: 28px 20px;\n  background: #fafafa;\n  border-radius: 14px;\n}\n.hordanso-blog .multi-cta .cta-button {\n  margin: 0;\n}\n\n.faq { margin-top: 24px; }\n.faq-item {\n  border: 1px solid #eee;\n  border-radius: 10px;\n  margin-bottom: 12px;\n  overflow: hidden;\n  transition: border-color 0.2s ease;\n}\n.faq-item.active { border-color: #fe5a53; }\n.faq-question {\n  width: 100%;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 16px;\n  text-align: left;\n  border: none;\n  background: #fff;\n  font-size: 16px;\n  font-weight: 600;\n  color: #111;\n  cursor: pointer;\n  padding: 18px 20px;\n  margin: 0;\n  transition: background 0.2s ease;\n}\n.faq-item.active .faq-question { background: #fff5f4; color: #d94840; }\n.faq-question:hover { background: #fafafa; }\n.faq-icon {\n  flex-shrink: 0;\n  position: relative;\n  width: 22px;\n  height: 22px;\n  border-radius: 50%;\n  background: #fe5a53;\n}\n.faq-icon::before,\n.faq-icon::after {\n  content: \"\";\n  position: absolute;\n  background: #fff;\n  top: 50%;\n  left: 50%;\n  transform: translate(-50%, -50%);\n}\n.faq-icon::before { width: 10px; height: 2px; }\n.faq-icon::after { width: 2px; height: 10px; transition: transform 0.25s ease; }\n.faq-item.active .faq-icon::after { transform: translate(-50%, -50%) rotate(90deg) scaleY(0); }\n.faq-answer {\n  max-height: 0;\n  overflow: hidden;\n  transition: max-height 0.3s ease;\n  background: #fff;\n}\n.faq-answer p {\n  padding: 0 20px 18px;\n  margin: 0;\n  color: #444;\n  font-size: 15px;\n}\n\n\/* ---------- Blog images ---------- *\/\n.hordanso-blog .blog-image {\n  margin: 26px 0 30px;\n  text-align: center;\n}\n.hordanso-blog .blog-image img {\n  max-width: 100%;\n  height: auto;\n  display: inline-block;\n  border-radius: 12px;\n  border: 1px solid #ececec;\n  box-shadow: 0 6px 18px rgba(0, 0, 0, 0.06);\n}\n.hordanso-blog .blog-image--narrow img {\n  max-width: 272px;\n}\n\n.map-section {\n  margin-top: 48px;\n  padding-top: 36px;\n  border-top: 2px solid #f1f1f1;\n}\n.map-section h2 { border-bottom: none; margin-bottom: 10px; }\n.map-wrap {\n  border-radius: 14px;\n  overflow: hidden;\n  border: 1px solid #ececec;\n  box-shadow: 0 6px 18px rgba(0,0,0,0.06);\n  position: relative;\n  padding-bottom: 56.25%;\n  height: 0;\n  margin-top: 18px;\n}\n.map-wrap iframe {\n  position: absolute;\n  top: 0;\n  left: 0;\n  width: 100%;\n  height: 100%;\n  border: 0;\n}\n\n@media (max-width: 600px) {\n  .hordanso-blog h1 { font-size: 27px; }\n  .hordanso-blog h2 { font-size: 21px; }\n  .multi-cta { flex-direction: column; }\n  .hordanso-blog .multi-cta .cta-button { width: 100%; justify-content: center; }\n  .audit-table .q-col { width: 60%; }\n  .hordanso-blog .blog-image img { border-radius: 10px; }\n}\n<\/style>\n\n<script data-wp-block-html=\"js\">\ndocument.addEventListener(\"DOMContentLoaded\", function () {\n  const items = document.querySelectorAll(\".faq-item\");\n\n  items.forEach((item) => {\n    const question = item.querySelector(\".faq-question\");\n    const answer = item.querySelector(\".faq-answer\");\n\n    question.addEventListener(\"click\", () => {\n      const isOpen = item.classList.contains(\"active\");\n\n      items.forEach((other) => {\n        other.classList.remove(\"active\");\n        other.querySelector(\".faq-question\").setAttribute(\"aria-expanded\", \"false\");\n        other.querySelector(\".faq-answer\").style.maxHeight = null;\n      });\n\n      if (!isOpen) {\n        item.classList.add(\"active\");\n        question.setAttribute(\"aria-expanded\", \"true\");\n        answer.style.maxHeight = answer.scrollHeight + \"px\";\n      }\n    });\n  });\n});\n<\/script>\n\n<article class=\"hordanso-blog\">\n\n  <header class=\"blog-header\">\n    <p class=\"eyebrow\">WordPress Security<\/p>\n    <h1>AI Is Making Hackers Faster: The WordPress Maintenance and Security Checklist Every Site Owner Needs<\/h1>\n    <p class=\"lead\">Attackers now use AI to find weak websites faster than ever, and the gap between a security flaw going public and hackers using it has shrunk to days, sometimes hours. If your WordPress site is not maintained, it is an easy target. This guide explains what changed, how sites actually get hacked, and the exact maintenance routine that closes those doors.<\/p>\n    <p class=\"updated-note\">Last updated: October 2026<\/p>\n  <\/header>\n\n  <div class=\"key-takeaways\">\n    <p class=\"kt-label\">Key Takeaways<\/p>\n    <ul>\n      <li>The UK&#8217;s National Cyber Security Centre says the time between a flaw being disclosed and being exploited has shrunk to days, and AI will almost certainly shorten it further.<\/li>\n      <li>Patchstack recorded 7,966 new vulnerabilities in the WordPress ecosystem in 2024, and 96% of them were in plugins, not WordPress itself.<\/li>\n      <li>Most hacks come through the same few doors: weak passwords, missed updates, risky plugins and themes, and phishing.<\/li>\n      <li>A simple routine of updates, backups, scans, and login protection blocks most of these attacks. Doing it every week matters more than doing it perfectly once.<\/li>\n    <\/ul>\n  <\/div>\n\n  <div class=\"cta-inline\">\n    <a class=\"cta-button\" href=\"https:\/\/hordanso.net\/en-za\/wordpress-maintenance\/?utm_source=blog&#038;utm_medium=organic&#038;utm_campaign=wp_security_maintenance_oct\">\n      See WordPress Maintenance Services\n      <span class=\"cta-arrow\" aria-hidden=\"true\">&#8594;<\/span>\n    <\/a>\n  <\/div>\n\n  <h2>The Short Answer First<\/h2>\n  <p>Yes, AI has made attacks on websites faster and cheaper to run. The good news is that it has not created new magic ways in. Hackers still break in mostly through outdated plugins, weak passwords, and careless logins. A WordPress site that is updated quickly, backed up daily, scanned regularly, and protected with strong logins and two-factor authentication shuts most of those doors. That routine is what WordPress maintenance means.<\/p>\n\n  <h2>What AI Changed for Hackers<\/h2>\n  <p>In its assessment <a href=\"https:\/\/www.ncsc.gov.uk\/report\/impact-ai-cyber-threat-now-2027\" target=\"_blank\" rel=\"noopener\">Impact of AI on cyber threat from now to 2027<\/a>, the UK&#8217;s National Cyber Security Centre (NCSC) makes three points every website owner should know:<\/p>\n  <ul class=\"check-list\">\n    <li><strong>Attacks get faster.<\/strong> The NCSC states that the time between disclosure and exploitation has shrunk to days, and that AI will almost certainly reduce it further.<\/li>\n    <li><strong>Unpatched sites get hit more.<\/strong> It expects AI tools to increase the volume of attacks against systems that have not been updated with security fixes.<\/li>\n    <li><strong>A divide is forming.<\/strong> It warns of a digital divide between systems that keep pace with AI-enabled threats and those that do not.<\/li>\n  <\/ul>\n  <p>In plain terms, a forgotten plugin update used to give you weeks of breathing room. Today, automated tools can scan thousands of websites for that exact weakness within hours of it becoming public.<\/p>\n\n  <h2>The Numbers Behind WordPress Risk<\/h2>\n  <p>WordPress itself is well protected. The risk sits mostly in the plugins and themes added on top. These figures come from Patchstack&#8217;s <a href=\"https:\/\/patchstack.com\/whitepaper\/state-of-wordpress-security-in-2025\/\" target=\"_blank\" rel=\"noopener\">State of WordPress Security in 2025<\/a> report.<\/p>\n\n  <div class=\"table-wrap\">\n    <table>\n      <thead>\n        <tr><th>Finding (2024)<\/th><th>Figure<\/th><th>What it means for you<\/th><\/tr>\n      <\/thead>\n      <tbody>\n        <tr><td>New vulnerabilities in the WordPress ecosystem<\/td><td>7,966<\/td><td>New weaknesses are found every day, so updates are never &#8220;done&#8221;<\/td><\/tr>\n        <tr><td>Share found in plugins<\/td><td>96%<\/td><td>Every plugin you install adds risk, so keep only what you use<\/td><\/tr>\n        <tr><td>Share found in themes<\/td><td>4%<\/td><td>Themes need updates too, including inactive ones<\/td><\/tr>\n        <tr><td>Vulnerabilities in WordPress core<\/td><td>7<\/td><td>Core is rarely the problem when it is kept updated<\/td><\/tr>\n        <tr><td>Not fixed in time for public disclosure<\/td><td>33%<\/td><td>Sometimes there is no patch yet, so firewalls and monitoring matter<\/td><\/tr>\n      <\/tbody>\n    <\/table>\n  <\/div>\n\n  <p>The same report notes that it is common for vulnerabilities to be exploited within hours of public disclosure. That is why waiting for &#8220;when I have time&#8221; no longer works.<\/p>\n\n  <h2>The Six Doors Hackers Use<\/h2>\n  <p>Google&#8217;s web.dev guide on the <a href=\"https:\/\/web.dev\/articles\/top-ways-sites-get-hacked-by-spammers\" target=\"_blank\" rel=\"noopener\">top ways sites get hacked by spammers<\/a> lists the routes attackers use most. Each one has a matching fix.<\/p>\n\n  <div class=\"table-wrap\">\n    <table>\n      <thead>\n        <tr><th>How sites get hacked<\/th><th>What it looks like<\/th><th>How maintenance closes it<\/th><\/tr>\n      <\/thead>\n      <tbody>\n        <tr><td>Compromised passwords<\/td><td>Weak or reused admin passwords guessed by bots<\/td><td>Strong unique passwords, two-factor login, limited login attempts<\/td><\/tr>\n        <tr><td>Missed security updates<\/td><td>Old WordPress, plugin, theme, or PHP versions with known flaws<\/td><td>Weekly updates, applied faster for security releases<\/td><\/tr>\n        <tr><td>Insecure themes and plugins<\/td><td>Abandoned or pirated add-ons carrying flaws or hidden code<\/td><td>Install only from trusted sources and delete what you do not use<\/td><\/tr>\n        <tr><td>Social engineering<\/td><td>Phishing emails that trick staff into handing over logins<\/td><td>Two-factor login and staff awareness<\/td><\/tr>\n        <tr><td>Security policy holes<\/td><td>Too many admins, no HTTPS, open file uploads<\/td><td>Least-privilege user roles, SSL everywhere, locked-down uploads<\/td><\/tr>\n        <tr><td>Data leaks<\/td><td>Error messages or files that expose private information<\/td><td>Hide error output on live sites and review public files<\/td><\/tr>\n      <\/tbody>\n    <\/table>\n  <\/div>\n\n  <h2>Warning Signs Your Site May Already Be Hacked<\/h2>\n  <ul class=\"check-list\">\n    <li><strong>Strange search results.<\/strong> Your pages show up in Google with spammy titles, foreign-language text, or pharmacy and casino keywords.<\/li>\n    <li><strong>Unexpected redirects.<\/strong> Visitors, especially on mobile, get sent to other websites.<\/li>\n    <li><strong>Unknown admin users.<\/strong> New administrator accounts appear in WordPress that nobody on your team created.<\/li>\n    <li><strong>Browser or Google warnings.<\/strong> Visitors see &#8220;This site may be hacked&#8221; or a red security warning.<\/li>\n    <li><strong>A sudden slowdown or traffic spike.<\/strong> Your server load jumps without a matching rise in real visitors.<\/li>\n    <li><strong>Your host or email provider contacts you.<\/strong> They report malware, spam being sent from your server, or suspended services.<\/li>\n  <\/ul>\n  <p>Google Search Console also reports security problems it finds on your site, so connect your site to it and check the Security issues report regularly.<\/p>\n\n  <h2>The WordPress Maintenance Checklist<\/h2>\n  <p>This is the routine that protects a typical business website. The <a href=\"https:\/\/developer.wordpress.org\/advanced-administration\/security\/hardening\/\" target=\"_blank\" rel=\"noopener\">WordPress hardening guide<\/a> backs up the core of it: run the latest WordPress version, keep plugins updated, delete the ones you do not use, and back up regularly.<\/p>\n\n  <div class=\"table-wrap\">\n    <table>\n      <thead>\n        <tr><th>How often<\/th><th>Task<\/th><th>Why it matters<\/th><\/tr>\n      <\/thead>\n      <tbody>\n        <tr><td><strong>Daily<\/strong><\/td><td>Automatic backup of files and database<\/td><td>Lets you roll back after a hack or a bad update<\/td><\/tr>\n        <tr><td><strong>Daily<\/strong><\/td><td>Uptime and security monitoring<\/td><td>Catches downtime, defacement, or malware early<\/td><\/tr>\n        <tr><td><strong>Weekly<\/strong><\/td><td>Update WordPress core, plugins, and themes<\/td><td>Closes known flaws before bots find them<\/td><\/tr>\n        <tr><td><strong>Weekly<\/strong><\/td><td>Malware scan<\/td><td>Finds injected code and backdoors<\/td><\/tr>\n        <tr><td><strong>Weekly<\/strong><\/td><td>Review users and failed login attempts<\/td><td>Spots unknown admins and password-guessing attacks<\/td><\/tr>\n        <tr><td><strong>Monthly<\/strong><\/td><td>Test restoring a backup<\/td><td>A backup you cannot restore is not a backup<\/td><\/tr>\n        <tr><td><strong>Monthly<\/strong><\/td><td>Remove unused plugins and themes<\/td><td>Less code means fewer ways in<\/td><\/tr>\n        <tr><td><strong>Monthly<\/strong><\/td><td>Check speed, broken links, and forms<\/td><td>Keeps the site working for real customers<\/td><\/tr>\n        <tr><td><strong>Quarterly<\/strong><\/td><td>Check PHP version, SSL certificate, and admin access list<\/td><td>Old PHP and expired SSL are common weak spots<\/td><\/tr>\n        <tr><td><strong>Quarterly<\/strong><\/td><td>Change passwords for admin, hosting, and database accounts<\/td><td>Limits damage from leaked or reused passwords<\/td><\/tr>\n      <\/tbody>\n    <\/table>\n  <\/div>\n\n  <h2>Backups: Your Last Line of Defence<\/h2>\n  <p>The <a href=\"https:\/\/developer.wordpress.org\/advanced-administration\/security\/backup\/\" target=\"_blank\" rel=\"noopener\">WordPress backup handbook<\/a> explains that a full backup needs both your database and your files to restore a typical site. It suggests weekly backups for smaller sites and daily backups for busy ones, always backing up before an upgrade, and keeping 3 to 5 recent backups in separate places such as your server, cloud storage, and your own computer. If ransomware or a hack wipes your server, an off-site copy is what saves your business.<\/p>\n  <p>We cover this in more depth in our guide to <a href=\"https:\/\/hordanso.net\/en-za\/what-happens-if-you-skip-wordpress-maintenance\/\">what happens if you skip WordPress maintenance<\/a>.<\/p>\n\n  <h2>Two-Factor Login: The Cheapest Big Win<\/h2>\n  <p>Most break-ins through the login page rely on stolen or guessed passwords. The US Cybersecurity and Infrastructure Security Agency (CISA) says that requiring <a href=\"https:\/\/www.cisa.gov\/require-multifactor-authentication\" target=\"_blank\" rel=\"noopener\">multifactor authentication<\/a> can prevent a significant number of account compromise attacks. Turn it on for every WordPress administrator, your hosting account, and your domain registrar account.<\/p>\n\n  <h2>Quick Self-Check: How Exposed Is Your Website?<\/h2>\n  <p>Answer honestly. Every No is an open door that needs closing.<\/p>\n\n  <table class=\"audit-table\">\n    <thead>\n      <tr>\n        <th class=\"q-col\">Question<\/th>\n        <th class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span> Yes<\/th>\n        <th class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span> No<\/th>\n      <\/tr>\n    <\/thead>\n    <tbody>\n      <tr>\n        <td>Were WordPress, all plugins, and all themes updated in the last 7 days?<\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span><\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span><\/td>\n      <\/tr>\n      <tr>\n        <td>Do you have a backup from the last 24 hours stored somewhere other than your server?<\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span><\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span><\/td>\n      <\/tr>\n      <tr>\n        <td>Have you successfully restored a backup in the last 3 months?<\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span><\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span><\/td>\n      <\/tr>\n      <tr>\n        <td>Is two-factor login turned on for every administrator?<\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span><\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span><\/td>\n      <\/tr>\n      <tr>\n        <td>Have you deleted every plugin and theme you are not actively using?<\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span><\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span><\/td>\n      <\/tr>\n      <tr>\n        <td>Does your whole site load over HTTPS with a valid SSL certificate?<\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span><\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span><\/td>\n      <\/tr>\n      <tr>\n        <td>Is your site scanned for malware at least once a week?<\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-yes\" aria-hidden=\"true\">&#10003;<\/span><\/td>\n        <td class=\"icon-col\"><span class=\"icon icon-no\" aria-hidden=\"true\">&#10005;<\/span><\/td>\n      <\/tr>\n    <\/tbody>\n  <\/table>\n\n  <h2>What to Do If Your Site Has Been Hacked<\/h2>\n  <ol class=\"numbered-list\">\n    <li>Stay calm and put the site into maintenance mode so visitors are not exposed<\/li>\n    <li>Change every password: WordPress admins, hosting, database, FTP, and email<\/li>\n    <li>Take a copy of the hacked site before changing anything, so the cause can be investigated<\/li>\n    <li>Restore the most recent clean backup from before the hack<\/li>\n    <li>Update WordPress, every plugin, and every theme, and delete anything unused<\/li>\n    <li>Run a full malware scan and remove any unknown admin users<\/li>\n    <li>Turn on two-factor login and a web application firewall<\/li>\n    <li>Check Google Search Console for security warnings and request a review once the site is clean<\/li>\n  <\/ol>\n  <p>If you do not have a clean backup or the hack keeps coming back, get professional help. Reinfection usually means a hidden backdoor was missed.<\/p>\n\n  <h2>Do It Yourself or Use a Maintenance Service?<\/h2>\n\n  <div class=\"table-wrap\">\n    <table>\n      <thead>\n        <tr><th>Factor<\/th><th>Do it yourself<\/th><th>Managed maintenance<\/th><\/tr>\n      <\/thead>\n      <tbody>\n        <tr><td>Cost<\/td><td>Your time<\/td><td>A monthly fee<\/td><\/tr>\n        <tr><td>Speed of security updates<\/td><td>Depends on when you remember<\/td><td>Handled on a schedule by a team<\/td><\/tr>\n        <tr><td>Backups and restore testing<\/td><td>Easy to forget<\/td><td>Run and checked for you<\/td><\/tr>\n        <tr><td>Hack recovery<\/td><td>Stressful and slow without experience<\/td><td>Handled by people who do it often<\/td><\/tr>\n        <tr><td>Best for<\/td><td>Small sites with a technical owner<\/td><td>Business sites where downtime costs money<\/td><\/tr>\n      <\/tbody>\n    <\/table>\n  <\/div>\n\n  <h2>How Hordanso Helps You Stay Protected<\/h2>\n  <p>You can take the work off your plate in three ways, depending on how hands-on you want to be:<\/p>\n  <ul class=\"check-list\">\n    <li><strong><a href=\"https:\/\/hordanso.net\/en-za\/wordpress-maintenance\/\">WordPress Maintenance<\/a><\/strong> for owners who already have a site and want updates, monitoring, and upkeep handled for them.<\/li>\n    <li><strong><a href=\"https:\/\/hordanso.net\/en-za\/wordpress-hosting\/\">WordPress Hosting<\/a><\/strong>, which includes daily backups, weekly scans, a malware scanner, and free SSL on every plan.<\/li>\n    <li><strong><a href=\"https:\/\/hordanso.net\/en-za\/agentic-wordpress-hosting\/\">Agentic WordPress Hosting<\/a><\/strong>, where software agents handle security monitoring, firewall protection, brute force protection, automated plugin patching, and daily off-site backups.<\/li>\n  <\/ul>\n  <p>Whichever you choose, make sure your site has a valid <a href=\"https:\/\/hordanso.net\/en-za\/ssl-certificate\/\">SSL certificate<\/a> and that your team uses <a href=\"https:\/\/hordanso.net\/en-za\/business-email\/\">business email<\/a> accounts protected with strong passwords, since email is often the first thing attackers target.<\/p>\n\n  <div class=\"multi-cta\">\n    <a class=\"cta-button\" href=\"https:\/\/hordanso.net\/en-za\/wordpress-maintenance\/?utm_source=blog&#038;utm_medium=organic&#038;utm_campaign=wp_security_maintenance_oct\">Get WordPress Maintenance<\/a>\n    <a class=\"cta-button cta-outline\" href=\"https:\/\/clients.hordanso.net\/index.php?rp=\/store\/wordpress-hosting\">See WordPress Hosting Plans<\/a>\n  <\/div>\n\n  <h2>Key Terms, Explained Simply<\/h2>\n  <dl class=\"glossary\">\n    <dt>Vulnerability<\/dt>\n    <dd>A weakness in software that an attacker can use to break in or cause harm.<\/dd>\n    <dt>Exploit<\/dt>\n    <dd>The method or code an attacker uses to take advantage of a vulnerability.<\/dd>\n    <dt>Patch<\/dt>\n    <dd>An update that fixes a known vulnerability.<\/dd>\n    <dt>Malware<\/dt>\n    <dd>Harmful code placed on your site to steal data, send spam, or redirect visitors.<\/dd>\n    <dt>Backdoor<\/dt>\n    <dd>Hidden code that lets an attacker get back into a site even after passwords are changed.<\/dd>\n    <dt>Brute force attack<\/dt>\n    <dd>Automated guessing of usernames and passwords, often thousands of times a minute.<\/dd>\n    <dt>Two-factor authentication<\/dt>\n    <dd>A login that needs a second proof, such as a code from your phone, as well as your password.<\/dd>\n    <dt>Web application firewall<\/dt>\n    <dd>A filter that blocks malicious traffic before it reaches your website.<\/dd>\n  <\/dl>\n\n  <div class=\"cta-box\">\n    <p><strong>Worried your website is exposed, or already hacked?<\/strong><\/p>\n    <a class=\"cta-button\" href=\"https:\/\/hordanso.net\/en-za\/contact-us\/?utm_source=blog&#038;utm_medium=organic&#038;utm_campaign=wp_security_maintenance_oct\">Talk to Our Team<\/a>\n  <\/div>\n\n  <h2>Frequently Asked Questions<\/h2>\n  <div class=\"faq\">\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>Is AI really making websites easier to hack?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>AI is making attacks faster and more frequent rather than creating brand new ways in. The UK National Cyber Security Centre says the time between a flaw being disclosed and exploited has shrunk to days and that AI will almost certainly reduce it further, with more attacks against systems that have not been updated.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>Is WordPress itself insecure?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>No. Patchstack found only seven vulnerabilities in WordPress core in 2024, while 96% of the vulnerabilities it recorded were in plugins. The biggest risks are outdated or poorly maintained plugins and themes, weak passwords, and missed updates.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>What does WordPress maintenance include?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>WordPress maintenance covers regular updates to WordPress, plugins, and themes, daily backups, malware scans, uptime and security monitoring, user and login reviews, removing unused plugins, and checking speed, forms, and SSL. It keeps your site secure and working.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>How often should I update my WordPress plugins?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>Check for updates at least once a week, and apply security updates as soon as they are released. Patchstack notes that vulnerabilities are often exploited within hours of being made public, so waiting weeks leaves your site exposed.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>How often should I back up my website?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>The WordPress backup handbook suggests weekly backups for smaller sites and daily backups for busy ones, plus a backup before every upgrade. Keep 3 to 5 recent copies in separate places, and back up both your files and your database.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>How do I know if my WordPress site has been hacked?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>Common signs include spammy titles in Google search results, unexpected redirects, unknown admin users, browser security warnings, a sudden slowdown, or a warning from your host. Google Search Console also reports security issues it finds on your site.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>What should I do first if my site is hacked?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>Put the site into maintenance mode, change every password, and take a copy of the hacked site. Then restore a clean backup, update everything, scan for malware, remove unknown users, turn on two-factor login, and request a review in Google Search Console once the site is clean.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>Does an SSL certificate stop hackers?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>No. SSL encrypts data between your visitors and your site, which protects logins and forms from being read in transit. It does not stop attacks through outdated plugins or weak passwords, so you still need updates, backups, and strong logins.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>Is two-factor authentication worth setting up?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>Yes. CISA says requiring multifactor authentication can prevent a significant number of account compromise attacks. Turn it on for every WordPress administrator, your hosting account, and your domain registrar.<\/p><\/div>\n    <\/div>\n\n    <div class=\"faq-item\">\n      <button class=\"faq-question\" aria-expanded=\"false\">\n        <span>Should I do WordPress maintenance myself or hire a service?<\/span>\n        <span class=\"faq-icon\" aria-hidden=\"true\"><\/span>\n      <\/button>\n      <div class=\"faq-answer\"><p>If you are technical and have a small site, you can follow the checklist yourself. If your website brings in customers or sales, a managed maintenance service is usually safer, because updates, backups, and recovery happen on schedule even when you are busy.<\/p><\/div>\n    <\/div>\n\n  <\/div>\n\n  <h2>Sources and Further Reading<\/h2>\n  <ul class=\"check-list\">\n    <li><a href=\"https:\/\/www.ncsc.gov.uk\/report\/impact-ai-cyber-threat-now-2027\" target=\"_blank\" rel=\"noopener\">NCSC: Impact of AI on cyber threat from now to 2027<\/a>, for how AI is shortening the time to exploitation.<\/li>\n    <li><a href=\"https:\/\/patchstack.com\/whitepaper\/state-of-wordpress-security-in-2025\/\" target=\"_blank\" rel=\"noopener\">Patchstack: State of WordPress Security in 2025<\/a>, for the 2024 WordPress vulnerability figures.<\/li>\n    <li><a href=\"https:\/\/web.dev\/articles\/top-ways-sites-get-hacked-by-spammers\" target=\"_blank\" rel=\"noopener\">web.dev: Top ways sites get hacked by spammers<\/a>, for the most common ways attackers get in.<\/li>\n    <li><a href=\"https:\/\/developer.wordpress.org\/advanced-administration\/security\/hardening\/\" target=\"_blank\" rel=\"noopener\">WordPress Developer Resources: Hardening WordPress<\/a>, for official security advice.<\/li>\n    <li><a href=\"https:\/\/developer.wordpress.org\/advanced-administration\/security\/backup\/\" target=\"_blank\" rel=\"noopener\">WordPress Developer Resources: Backups<\/a>, for how to back up and how often.<\/li>\n    <li><a href=\"https:\/\/www.cisa.gov\/require-multifactor-authentication\" target=\"_blank\" rel=\"noopener\">CISA: Require Multifactor Authentication<\/a>, for why two-factor login matters.<\/li>\n  <\/ul>\n\n  <script type=\"application\/ld+json\">\n  {\n    \"@context\": \"https:\/\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n      { \"@type\": \"Question\", \"name\": \"Is AI really making websites easier to hack?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"AI is making attacks faster and more frequent rather than creating brand new ways in. The UK National Cyber Security Centre says the time between a flaw being disclosed and exploited has shrunk to days and that AI will almost certainly reduce it further, with more attacks against systems that have not been updated.\" } },\n      { \"@type\": \"Question\", \"name\": \"Is WordPress itself insecure?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"No. Patchstack found only seven vulnerabilities in WordPress core in 2024, while 96% of the vulnerabilities it recorded were in plugins. The biggest risks are outdated or poorly maintained plugins and themes, weak passwords, and missed updates.\" } },\n      { \"@type\": \"Question\", \"name\": \"What does WordPress maintenance include?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"WordPress maintenance covers regular updates to WordPress, plugins, and themes, daily backups, malware scans, uptime and security monitoring, user and login reviews, removing unused plugins, and checking speed, forms, and SSL. It keeps your site secure and working.\" } },\n      { \"@type\": \"Question\", \"name\": \"How often should I update my WordPress plugins?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"Check for updates at least once a week, and apply security updates as soon as they are released. Patchstack notes that vulnerabilities are often exploited within hours of being made public, so waiting weeks leaves your site exposed.\" } },\n      { \"@type\": \"Question\", \"name\": \"How often should I back up my website?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"The WordPress backup handbook suggests weekly backups for smaller sites and daily backups for busy ones, plus a backup before every upgrade. Keep 3 to 5 recent copies in separate places, and back up both your files and your database.\" } },\n      { \"@type\": \"Question\", \"name\": \"How do I know if my WordPress site has been hacked?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"Common signs include spammy titles in Google search results, unexpected redirects, unknown admin users, browser security warnings, a sudden slowdown, or a warning from your host. Google Search Console also reports security issues it finds on your site.\" } },\n      { \"@type\": \"Question\", \"name\": \"What should I do first if my site is hacked?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"Put the site into maintenance mode, change every password, and take a copy of the hacked site. Then restore a clean backup, update everything, scan for malware, remove unknown users, turn on two-factor login, and request a review in Google Search Console once the site is clean.\" } },\n      { \"@type\": \"Question\", \"name\": \"Does an SSL certificate stop hackers?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"No. SSL encrypts data between your visitors and your site, which protects logins and forms from being read in transit. It does not stop attacks through outdated plugins or weak passwords, so you still need updates, backups, and strong logins.\" } },\n      { \"@type\": \"Question\", \"name\": \"Is two-factor authentication worth setting up?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"Yes. CISA says requiring multifactor authentication can prevent a significant number of account compromise attacks. Turn it on for every WordPress administrator, your hosting account, and your domain registrar.\" } },\n      { \"@type\": \"Question\", \"name\": \"Should I do WordPress maintenance myself or hire a service?\", \"acceptedAnswer\": { \"@type\": \"Answer\", \"text\": \"If you are technical and have a small site, you can follow the checklist yourself. If your website brings in customers or sales, a managed maintenance service is usually safer, because updates, backups, and recovery happen on schedule even when you are busy.\" } }\n    ]\n  }\n  <\/script>\n\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>WordPress Security AI Is Making Hackers Faster: The WordPress Maintenance and Security Checklist Every Site Owner Needs Attackers now use AI to find weak websites faster than ever, and the gap between a security flaw going public and hackers using it has shrunk to days, sometimes hours. If your WordPress site is not maintained, it [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":11413,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"two_page_speed":[],"footnotes":""},"categories":[75,88,83,84],"tags":[121,96],"class_list":["post-11412","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-security","category-server","category-web-hosting-and-domain","tag-server","tag-web-hosting"],"_links":{"self":[{"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/posts\/11412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/comments?post=11412"}],"version-history":[{"count":0,"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/posts\/11412\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/media\/11413"}],"wp:attachment":[{"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/media?parent=11412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/categories?post=11412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hordanso.net\/en-za\/wp-json\/wp\/v2\/tags?post=11412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}