{"id":6399,"date":"2026-09-07T10:56:18","date_gmt":"2026-09-07T08:56:18","guid":{"rendered":"https:\/\/wpresswartung.com\/wordpress-sicherheit\/"},"modified":"2026-09-30T15:31:13","modified_gmt":"2026-09-30T13:31:13","slug":"wordpress-security","status":"publish","type":"page","link":"https:\/\/wpresswartung.com\/en\/wordpress-security\/","title":{"rendered":"WordPress Security"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n
\n
\n \t\t\t\n\tHome\n<\/a>\n\t\t\t\t\t\/<\/span>\n\t\t\t\t\t\n\tWordPress Maintenance\n<\/a>\n\t\t\t\t\t\/<\/span>\n\t\t\t\t\tSecurity<\/span>\n\t\t\n<\/div>\n
\n
\n \t\t\t

Services<\/p>\n\t\t\t\t\t

WordPress Security<\/h1>\n\t\t\t\t\t

WordPress is not insecure \u2013 outdated installations are. We close known vulnerabilities promptly, secure the login, monitor the website continuously and restore it in an emergency.<\/p>\n\t\t

\n \t\t\t\n\tSecure your website\n<\/a>\n\t\t\t\t\t\n\tRequest a security check\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n
\n \t\t\t

Security status<\/p>\n\t\t

\n
\n \t\t\t
<\/path><\/svg><\/div>\n\t\t\t\t\t

Malware scan: no findings<\/p>\n\t\t\n<\/div>\n

\n \t\t\t
<\/path><\/svg><\/div>\n\t\t\t\t\t

214 login attempts blocked<\/p>\n\t\t\n<\/div>\n

\n \t\t\t
<\/path><\/svg><\/div>\n\t\t\t\t\t

No unknown admin accounts<\/p>\n\t\t\n<\/div>\n

\n \t\t\t
<\/path><\/svg><\/div>\n\t\t\t\t\t

All security updates applied<\/p>\n\t\t\n<\/div>\n

\n \t\t\t
<\/path><\/svg><\/div>\n\t\t\t\t\t

SSL certificate valid until 12\/2026<\/p>\n\t\t\n<\/div>\n\n<\/div>\n\t\t\t

Excerpt from a monthly maintenance report.<\/p>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n

\n
\n \t\t\t

How attacks on WordPress work<\/h2>\n\t\t\t\t\t

Attacks are automated. Bots scan the web for websites running a plugin version with a publicly documented vulnerability \u2013 regardless of industry, size or visitor numbers. Once a vulnerability is published, it can be used by scans from that very moment. Update frequency therefore directly determines how long your website remains vulnerable.<\/p>\n\t\t

\n
\n \t\t\t

Outdated plugins<\/h3>\n\t\t\t\t\t

The most common entry point. Even deactivated plugins remain vulnerable as long as the files are on the server.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Brute force at login<\/h3>\n\t\t\t\t\t

Automated login attempts on wp-login.php \u2013 effective against weak or reused passwords.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Expired licences<\/h3>\n\t\t\t\t\t

Premium plugins without a valid licence no longer receive updates \u2013 often unnoticed for months.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Spam & redirects<\/h3>\n\t\t\t\t\t

Compromised websites are misused to send spam or for hidden redirects. The domain then ends up on blocklists.<\/p>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n

\n
\n \t\t\t

Our security measures<\/h2>\n\t\t\t\t\t

What works is a small number of consistently carried-out measures \u2013 not the longest possible list of installed security plugins.<\/p>\n\t\t

\n
\n \t\t\t

Firewall<\/h3>\n\t\t\t\t\t

Filters known attack patterns before they reach WordPress and automatically blocks suspicious requests.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Login protection & 2FA<\/h3>\n\t\t\t\t\t

Limited login attempts, blocking of suspicious IP addresses and, on request, two-factor authentication for all editors.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Malware scans<\/h3>\n\t\t\t\t\t

Regular checks of files and database for malicious code, modified core files and unknown user accounts.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Prompt security updates<\/h3>\n\t\t\t\t\t

Checked and applied up to three times a week. Security-relevant updates are brought forward.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Country & IP blocking<\/h3>\n\t\t\t\t\t

In Business Enterprise: access from regions with no business relevance is blocked entirely.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

CDN with DDoS protection<\/h3>\n\t\t\t\t\t

Bunny CDN absorbs traffic spikes and overload attacks while speeding up delivery at the same time.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Monitoring<\/h3>\n\t\t\t\t\t

Uptime, login and file-change monitoring reports anomalies automatically before visitors notice them.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Backups as a fallback<\/h3>\n\t\t
\n \t\t\t

Daily external backups are the last line of defence. Details under<\/p>\n\t\t\t\t\t\n\tWordPress Backups\n<\/a>\n\t\t\t\t\t

.<\/p>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n

\n
\n \t\t\t

When something does happen<\/h2>\n\t\t\t\t\t

There is no such thing as complete security. What matters is how quickly an incident is detected and resolved. In all plans, restoration in an emergency is part of maintenance \u2013 with no hourly billing in a state of emergency.<\/p>\n\t\t

\n
\n \t\t\t

01<\/p>\n\t\t\t\t\t

Detect<\/h3>\n\t\t\t\t\t

Monitoring automatically reports an outage, file change or anomaly.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

02<\/p>\n\t\t\t\t\t

Contain<\/h3>\n\t\t\t\t\t

Secure the website, lock access, identify affected files.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

03<\/p>\n\t\t\t\t\t

Clean up<\/h3>\n\t\t\t\t\t

Remove malicious code or restore a clean state from the backup.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

04<\/p>\n\t\t\t\t\t

Close the gap<\/h3>\n\t\t\t\t\t

Fix the entry point, renew passwords, document the incident.<\/p>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n

\n
\n
\n \t\t\t

Questions about security<\/h2>\n\t\t\t\t\t

Suspect an incident or want your website's condition checked? Get in touch \u2013 we will look into it promptly.<\/p>\n\t\t\t\t\t\n\tRequest a security check\n<\/a>\n\t\t\n<\/div>\n

\n \t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIsn't a security plugin enough?<\/a>\n\t\t\t\t\t<\/div><\/h3>\n\t\t\t\t\t

A plugin can filter attacks, but it cannot update an outdated version. Without regular updates, the vulnerability stays open, no matter which firewall sits in front of it.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tMy website is small \u2013 am I affected at all?<\/a>\n\t\t\t\t\t<\/div><\/h3>\n\t\t\t\t\t

Yes. Scans look for software versions, not for companies. Small websites are in fact affected more often, because they are maintained less frequently.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tDo you clean up a website that has already been hacked?<\/a>\n\t\t\t\t\t<\/div><\/h3>\n\t\t\t\t\t

Yes. We bill the clean-up of an existing incident by effort and then start ongoing maintenance.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs restoration included in the price?<\/a>\n\t\t\t\t\t<\/div><\/h3>\n\t\t\t\t\t

Yes, in all plans. Starting with Business Basic, we restore a current backup in an emergency \u2013 at no additional cost and without hourly billing.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t