What goes in a WordPress security checklist for a small website?
TL;DR WordPress security in 2026 is mostly a plugin problem, not a core problem. Patchstack counted 6,700 new ecosystem vulnerabilities in the first six months of 2025. 89% landed in plugins, exactly one in core. Webhostmost tracked 333 new disclosures…