The WordPress security team works diligently to provide important security updates and vulnerability patches. However, the use of third-party plugins and themes exposes users to additional security threats. By regularly installing the latest versions of core WordPress files and extensions, you can ensure that your website possesses all of the prevailing security patches.
Plugins and themes can become deprecated, obsolete, or include bugs that pose serious security risks to your website.
To protect your WordPress installation, we recommend that you audit your plugins and themes on a regular basis.
Assess Your Plugin Security
You can assess the security of WordPress plugins and themes by reviewing a couple of important indicators:
Does the plugin or theme have a large install base?
Are there a lot of user reviews, and is the average rating high?
Are the developers actively supporting their plugin and pushing frequent updates or security patches?
Does the vendor list terms of service or a privacy policy?
Does the vendor include a physical contact address in the ToS or from a contact page?
Carefully read the Terms of Service – it may include unwanted extras that the authors didn’t
Source: https://managewp.org/articles/16650/sucuri-security
source https://williechiu40.wordpress.com/2017/11/19/sucuri-security/
No comments:
Post a Comment