Security research and disclosures
Vulnerability research, disclosure write-ups and practical hardening guidance for people running WordPress in production.
-
From Noise to Action: An Operator’s Blueprint to Turn WordPress Telemetry into Fixes
A step-by-step operator playbook for agency teams: triage noisy WordPress telemetry, prioritize actionable findings, and apply precise remediation so client sites stop generating repetitive…
-
How WordPress Hacks Actually Happen — A Battle-Tested Checklist Playbook
A pragmatic playbook for WordPress site owners: learn the attack chains that matter, how to turn noisy telemetry into reliable signals, and a checklist…
-
Operational Roadmap: Harden WordPress and Contain Malware & Web Shells
A pragmatic, operator-focused roadmap that combines quick wins and deep fixes to harden WordPress, detect and contain malware and web shells, and restore uptime…
-
Layered Defense for WordPress: Hardening and Incident Response Roadmap to Stop Malware & Web Shells
A practical, operator-focused roadmap to build layered defenses that prevent, detect, and contain WordPress malware and web shells. Includes quick wins, deep fixes, an…
-
Incident Walkthrough: Locking Down Admin Access to Contain a WordPress Privilege Compromise
A high-urgency tactical walkthrough that shows founders how to contain a WordPress admin compromise and harden privileged workflows with prioritized, low-overhead controls.
-
Why Other Plugins Aren’t Enough: Stop Plugin Exploits During Disclosure Windows
A tactical teardown for eCommerce managers: why relying on generic plugins leaves WooCommerce checkout and payment data exposed during disclosure windows — and what…