Security research and disclosures
Vulnerability research, disclosure write-ups and practical hardening guidance for people running WordPress in production.
-
Hardening Admin Access and Privileged Workflows: A Mistakes-to-Avoid Playbook for WordPress Owners
A mentor-style teardown for WordPress owners: common admin-access mistakes that invite breaches, clear corrective actions for privileged workflows, and a practical checklist to reduce…
-
Layered Response Blueprint: Stop WordPress Malware & Web Shells Fast
A pragmatic, step-by-step hardening and incident response blueprint for IT generalists to prevent, detect, contain, and remediate WordPress malware and web shells while preserving…
-
Avoid These Admin-Access Mistakes That Lead to Breaches: A Tactical Teardown
A practical teardown for WordPress site owners: the costly admin-access mistakes that invite compromise, why they fail, and step-by-step corrective actions you can implement…
-
Minimize WooCommerce Blast Radius: A Tactical Roadmap for Monitoring & Recovery
A high-urgency, prioritized implementation roadmap for eCommerce managers to shrink incident blast radius: quick containment steps, monitoring controls, and recovery playbooks tailored to WooCommerce…
-
Admin Access Hardening: 12 Costly Mistakes Agencies Make and Tactical Fixes
A teardown for agency operators: the most common admin-access mistakes across client WordPress installs, step-by-step corrective actions, and a practical checklist to harden privileged…
-
Stop Brute-Force & Credential Stuffing: A Battle-Tested WordPress Hardening Playbook
A practical, mentor-style checklist for technical founders to harden WordPress against brute-force and credential stuffing attacks without enterprise overhead.