WordPress Security Blog

Configuring HTTP security headers on WordPress

Most modern browsers support a variety of HTTP security headers to improve the security of your WordPress website, better protect your visitors from classes of browser attacks such as clickjacking, cross-site scripting, and other common attacks, and even improve your site’s visitors’ privacy online. This article gives an overview of what these HTTP security headers […]

The ultimate guide to the WordPress database

At its core, WordPress is a CMS (Content Management System). To manage content, it needs to be able to store it. WordPress does this through folders and files, and a database. We have previously covered the WordPress filesystem in a separate article; we will focus on the database this time around. In this article, we […]

2021: A year in review

2021 was touted as the year in which everything returns back to normality. Alas, this was not to be, as the developments we were hoping for didn’t fully materialize. 2021, however, was a year of hope in which human ingenuity triumphed over tragedy. While not all problems were fixed (they rarely, if ever, are) 2021 […]

Important CAPTCHA 4WP Announcement

When the original developer of the plugin formerly known as Advanced noCaptcha & invisible Captcha (v2 & v3) developed the plugin, he included integration with third-party plugins such as Contact Form 7 and WooCommerce as a premium feature. This could be clearly seen in the Premium Edition advert located on the right side of the […]

Plugin reload: Advanced noCaptcha & invisible Captcha is now CAPTCHA 4WP

When we first came across the opportunity to acquire Advanced noCaptcha & invisible Captcha (v2 & v3) last year, we quickly understood this plugin’s potential to elevate the CAPTCHA game for WordPress administrators and website owners. While we felt that the plugin needed some TLC that we were more than happy to put in, we […]

What is CAPTCHA?

I have a venerable obsession with efficiency and productivity. I want to do and see many things, but time is, and always will be, an issue. Problems often crop up, threatening to derail the order of things through which efficiency and productivity prosper. Hence, I developed systems to deal with these problems as quickly and […]

How to set up multiple WordPress sites using XAMPP

XAMPP is used by many WordPress administrators to set up WordPress environments. While there are many different case uses, some of the most common use cases are to set up a staging, development or testing environment. As a highly configurable environment, XAMPP offers many advantages, including the ability to set up multiple WordPress sites through […]

The WordPress file system

WordPress is, at its core, a web application, and just like every other web application, it requires and uses a labyrinth of folders and files to work. These files and folders include everything from access controls and WordPress’ core code to the plugins, themes, media you upload, and everything in between. Posts and pages are […]

How to troubleshoot common WordPress errors

With WordPress, you can create and manage a site almost without any technical knowledge. It has many built-in features and templates that let you get started right away. And if you do need to change something, the large user community can help you out. But as with all things in the world (software included), WordPress […]

A new chapter for WP 2FA

Since its inception, WP 2FA has evolved to become one of the top WordPress 2FA plugins – thanks to the hard work of the team and our customers who have shown faith in us and our products and provided us with invaluable feedback. WordPress security continues to become an increasingly hot topic, more so as […]

Our other plugins