Security
-
Preventing WP’s “Application Passwords” from Being Abused
A recent finding shows that Rank Math (a SEO plugin) automatically creates an Application Password that has Admin powers without user consent.
-
Blocking OPML Links in WordPress
OPML was designed to share link lists between feed readers and blogging tools. It’s a relic from early blogging workflows.
-
Disabling Concatenated Script Loading in WordPress
Disabling Concatenated Script Loading in WordPress to gain practical benefits.
-
WordPress Security in Good Hands
Explain WordPress security, its current threats and how to harden the whole system.
-
Secure Your wp-config.php for Stronger WordPress Protection
Three simple steps to secure your wp-config.php file and strengthen the overall security of your WordPress site.
-
Key Figures in the State of WordPress Security in 2025
In 2024, 7,966 new vulnerabilities were found in the WordPress ecosystem, primarily in third-party plugins. That’s a 34% increase over 2023.
-
Setting Up SSL Certificate for Your WordPress Website, Using Cloudflare
Cloudflare offers free SSL certificates that you can easily apply for your WordPress website at no cost. In this tutorial, I’ll walk you through how to integrate Cloudflare SSL into WordPress running on Nginx web server.
-
How to Connect to a Server via SSH
SSH (Secure Shell) allows you to securely log in to a remote server, execute commands, and transfer files. In this article, I’ll walk you through how to connect to an Ubuntu server from a macOS, Linux, and Windows computer, using SSH key.
-
Set Up a Proper CRON JOB System for WordPress
Cron Job (specifically WP-Cron in WordPress) is one of those hidden features most site owners rarely think about until their scheduled tasks start failing or running late. In this article, I’ll explain why relying on WP-Cron can be problematic and why replacing it with a proper system-level cron job is a smarter choice for security…
-
How to Disable XML-RPC Protocol in WordPress
XML-RPC is a legacy WordPress protocol that allows remote publishing and app integrations but has since been replaced by the more secure and flexible REST API.