<![CDATA[Wordpress hardening]]>What steps do you take to secure/lockdown wordpress from bad actors?

]]>https://forum.cloudron.io/topic/8170/wordpress-hardeningRSS for NodeMon, 12 Oct 2026 18:17:54 GMTThu, 08 Dec 2022 20:47:20 GMT60<![CDATA[Reply to Wordpress hardening on Fri, 09 Dec 2022 08:44:02 GMT]]>@privsec Filter admin access by IP address, check this article:

Let me know

]]>https://forum.cloudron.io/post/57952https://forum.cloudron.io/post/57952Fri, 09 Dec 2022 08:44:02 GMT<![CDATA[Reply to Wordpress hardening on Fri, 09 Dec 2022 01:19:19 GMT]]>
  • disable REST API
  • disable application passwords
  • 2FA forced for admin account(s)
  • move login page to something other than /wp-login.php
  • Captcha for user authentification
  • manually approve new registrations
  • only a couple plugins that are (auto) updated frequently
  • up to date theme
  • disable mail functionality (if this is suitable for you)

    • All In One WP Security plugin is a good start and even the free version brings 90% of the necessary features.

    ]]>    https://forum.cloudron.io/post/57941https://forum.cloudron.io/post/57941Fri, 09 Dec 2022 01:19:19 GMT    <![CDATA[Reply to Wordpress hardening on Fri, 09 Dec 2022 00:02:11 GMT]]>@robi said in Wordpress hardening:

    Wordfence and Cerber.

    I'm not familiar with Cerber myself, but a big +1 to Wordfence, it's the first thing I install on any WordPress site.

    ]]>    https://forum.cloudron.io/post/57938https://forum.cloudron.io/post/57938Fri, 09 Dec 2022 00:02:11 GMT    <![CDATA[Reply to Wordpress hardening on Thu, 08 Dec 2022 21:13:34 GMT]]>@privsec Check out the security plugins like Wordfence and Cerber. 👍

    ]]>    https://forum.cloudron.io/post/57920https://forum.cloudron.io/post/57920Thu, 08 Dec 2022 21:13:34 GMT