cPanel EA4 profile: PHP 7.4 optimized for WordPress, TSF, and WooCommerce.

tsf-stable-2020-2.json

{
   "pkgs" : [
      "ea-apache24",
      "ea-apache24-config",
      "ea-apache24-config-runtime",
      "ea-apache24-mod_bwlimited",
      "ea-apache24-mod_cgid",
      "ea-apache24-mod_deflate",
      "ea-apache24-mod_env",
      "ea-apache24-mod_expires",
      "ea-apache24-mod_headers",
      "ea-apache24-mod_http2",
      "ea-apache24-mod_mpm_event",
      "ea-apache24-mod_proxy",
      "ea-apache24-mod_proxy_fcgi",
      "ea-apache24-mod_proxy_http",
      "ea-apache24-mod_proxy_wstunnel",
      "ea-apache24-mod_security2",
      "ea-apache24-mod_ssl",
      "ea-apache24-mod_unique_id",
      "ea-apache24-mod_version",
      "ea-apache24-tools",
      "ea-apr",
      "ea-apr-util",
      "ea-brotli",
      "ea-cpanel-tools",
      "ea-documentroot",
      "ea-libargon2",
      "ea-libcurl",
      "ea-libmcrypt",
      "ea-libnghttp2",
      "ea-libxml2",
      "ea-libzip",
      "ea-modsec-sdbm-util",
      "ea-nghttp2",
      "ea-oniguruma",
      "ea-oniguruma-devel",
      "ea-openssl",
      "ea-openssl11",
      "ea-php-cli",
      "ea-php-cli-lsphp",
      "ea-php74",
      "ea-php74-pear",
      "ea-php74-php-cli",
      "ea-php74-php-common",
      "ea-php74-php-curl",
      "ea-php74-php-devel",
      "ea-php74-php-fpm",
      "ea-php74-php-ftp",
      "ea-php74-php-gd",
      "ea-php74-php-iconv",
      "ea-php74-php-litespeed",
      "ea-php74-php-mbstring",
      "ea-php74-php-mysqlnd",
      "ea-php74-php-opcache",
      "ea-php74-php-pdo",
      "ea-php74-php-posix",
      "ea-php74-php-soap",
      "ea-php74-php-sockets",
      "ea-php74-php-xml",
      "ea-php74-php-zip",
      "ea-php74-runtime",
      "ea-profiles-cpanel"
   ],
   "version" : "0.1",
   "tags" : [],
   "name" : "tsf-stable-2020.2",
   "desc" : "PHP 7.4 optimized for WordPress, TSF, and WooCommerce."
}

mod_security2 is enabled in this package; it's a WAF.
Comodo hands out an excellent starting point to configure this firewall, which updates automatically with protection against known (WordPress) vulnerabilities: https://waf.comodo.com/.