On March 3, 2026, my article “Most Common Security Mistakes in WordPress (Part 1)” was published on the Spanish-language WordPress.com blog.
I review the most common mistakes that weaken a WordPress installation: outdated passwords and components, insecure permissions, lack of backups, exposure of sensitive files, XML-RPC, and wp-cron.
The article explains how to detect and fix these issues before they become a gateway for an attack.