Hi all,
I know if wordpress and their plugins are easy to be hacked. But as a web designer (my main job) i must learn which part or ways to hack wordpress. I join this forum and read other thread about it and how to response if my websites got hacked. So i just want to now what plugins is the best to protect my website and minimize the possibility.

Big Thanks

(September 23, 2022, 05:01 AM)burix13 Wrote: Hi all,
I know if wordpress and their plugins are easy to be hacked. But as a web designer (my main job) i must learn which part or ways to hack wordpress. I join this forum and read other thread about it and how to response if my websites got hacked. So i just want to now what plugins is the best to protect my website and minimize the possibility.

Big Thanks

HELLO!
Bro, what plugins are you talking about? to be honest, they still fuck them, 1000 sites a day. I think we should not talk about plugins, but about the very protection of this fucking engine. They haven't been able to figure out what's going on for a month now. I really don't recommend this crap. :huh:

Idk why Web Designer would care about the security or maybe you mean you are the Web Developer (be it Front-end or Back-end development or both)

using other people plugins means you rely on the plugin author to solve the issues or update the plugins
but yeah if you looking for easy way and free, Sucuri or Wordfence plugins are good enough for it

but if you really want to strengthen the security more,
don't know if you already search for it or not
but I think this should cover it all https://www.wpbeginner.com/wordpress-security/

Is wordpress just broke in terms of its general architecture? Shouldnt it be possible to provide a secure plugin infrastructure?

kkkkkkkkkkkkkkk

Bro, here's the thing. You've probably seen nulled versions of plugins or themes. There is malware embedded in them, and many people work with it. Secure plugins, audit the code and cautiously update the authors

Thank you for all suggested. i'll keep it all and try the best for protecting my website. Feel free to give me advice and post your opinion in this thread.

I use Wordfence but Sucuri is also very good, depends what's happened.

wordfence the best mate

I don‘t think WordPress is fucked up in terms of security per se. They still have a long way to go to implement things like Content Security Policy, Multi Factor Authentication, strict SameSite cookies and so on. From my point of view the best plugin you can get in terms of security is one that provides you measures against account takeover like WordFence. If you want to stick with free plugins you could have a look at Two-Factor. You could also implement a daily WP-CLI check for WordPress core and plugin checksums over SSH.

Update #1: And don‘t forget to check what security measures your provider delivers to you against brute-forcing, ddos-ing and so on.