WordPress Security Checklist: 15 Things to Fix Today

15 practical WordPress security fixes you can apply today to harden your site against common attacks.

Harden your WordPress site with these 15 fixes.

Access & login

1. Strong admin passwords + 2FA

2. Limit login attempts

3. Rename or protect /wp-login.php

Core hardening

4. Keep WordPress, plugins & themes updated

5. Remove unused plugins/themes

6. Disable file editing in wp-admin

7. Hide the WordPress version

Endpoints

8. Lock down XML-RPC