ericrasch

Hardening WP Security

A shortened, actionable version of the full punchlist

1. Sync your entire live site down to your local repo
2. Change the WordPress default admin user + generate a new password
3. Remove any users that aren’t supposed to be there, or that are no longer in use
4. Update WordPress (in case you need to update it manually: https://gist.github.com/ericrasch/4192dc480398a896d4d58b5afe08a1d0)
5. Update all WordPress plugins
6. Remove unused plugins