WordPress Security Resources
Curated guides, tools, and references for hardening WordPress installations and understanding the threat landscape.
WordPress Hardening Guide
The official WordPress.org guide to hardening your installation. Covers file permissions, database security, wp-config.php best practices, disabling file editing, and server-level protections. This is the authoritative starting point for WordPress security configuration.
Attacking WordPress — HackerTarget
A practical breakdown of how WordPress sites get attacked, covering enumeration techniques, brute-force methods, plugin exploitation, and post-compromise actions. Understanding attacker methodology is essential for building effective defenses. Written from the perspective of security testing and reconnaissance.