WordPress is hacked more often than other CMSs, but this is due to the overwhelming popularity of WordPress itself.
Is WordPress at risk?
It is estimated that over 40% of websites are made with WordPress, making WordPress by far the most popular content creation system (CMS) used for websites.
This increases the total amount of WordPress sites subject to tampering, and since it is well studied by hackers, vulnerabilities are easily exposed.
As discussed in the article below, we estimate that at most 1 in 200 sites are defaced each year.
Are WordPress sites vulnerable and can they be hacked quickly?
Is WordPress dangerous and should not be used?
It may seem like more when you consider that it might be hacked at a rate of 1 in 200 per year, but if it is such a dangerous CMS, most of the major companies’ sites are run on WordPress,
The face of the United States, the White House website, is not likely to be built on WordPress.
In other words, if properly managed, the probability of a WordPress site being tampered with can be reduced from 1 in 200 to 1 in tens of thousands, and most sites have this 1 in tens of thousands chance of being tampered with.
Most WordPress sites that are tampered with are those that have not been updated in over two years, in our experience.
How can WordPress be hacked?
As mentioned above, the amount of WordPress sites is enormous. And the vulnerabilities of its plug-ins and other vulnerabilities are disclosed to the public as a precaution.
However, this public information is also a double-edged blade and can be used as an entry point for hackers to hack.
Hackers hack WordPress sites by mechanically hacking into them, using tools that identify dozens of the most dangerous vulnerabilities (there are only so many vulnerabilities that are commonly used) one after the other, and by retrieving large lists of WordPress sites from search engines and other sources.
Another common method is to use a tool to check the WordPress administration login screen to see if tens of thousands of password combinations can be used to log in, and then steal administrator privileges.
In other words, if the password is strong enough and the WordPress site is free of the most dangerous known vulnerabilities, the chance of being hacked is almost zero.
Hackers will mainly target sites that are easy to break into, and they will quickly give up on sites without vulnerabilities that are more or less difficult to break into and try to find another site.
(It is possible that a site with a large number of hits will be targeted relentlessly, but foreign hackers may not know if the site has a large number of hits or not. On the other hand, a site with a low number of hits does not mean that there is no point in hacking it, but it can be used as a springboard for spam mail or as a foothold for attacks on other sites.)
Operate WordPress properly and run a safe site.
By simply taking the following measures, you can reduce the possibility of WordPress being tampered with to almost zero.
1 Use a password that is at least 14 random characters long and contains symbols.
2 Delete unused plug-ins and themes, and update those in use once every few months.
*If a vulnerability is found in a well-known and very popular plugin, update it immediately.
3 Convert to SSL.
For a more detailed explanation, please click here.
5 free WordPress security measures
We also recommend the use of a security plugin that automatically scans for malware, notifies the administrator, makes other security measures easy, and has a vulnerability scan function.
Free WordPress:Malware Scan & Security Plug-in [Malware and Virus Detection and Removal].
