Why? Because we are going to throw some statistics and findings at you that you might have not heard before. The most common way websites get hacked is by automated tools. Hackers try to exploit vulnerabilities in popular plugins and search for websites using specific plugins that have vulnerabilities. This is when a firewall with virtual patches can protect you. 96% of WordPress vulnerabilities are due to plugins and themes. The threat is not in WordPress itself, but the wide range of third-party plugins and themes that are used. A lot of developers or WordPress website owners have experienced attacks and hacks because of plugin or theme vulnerabilities. WordPress security does not have a set it and forget it/one-click solution. Since you build WordPress sites using multiple plugins that were built by third-party developers, you can never be sure how secure they are. Most of the plugin developers don't have security expertise and therefore vulnerabilities are often found. To be secure, you should always keep the plugins and themes you use updated and monitored. This is where Patchstack comes to help. |