How easy is it to hack a WordPress site?

Question

Information Security

How easy is it to hack a WP site if more or less proven plugins are used?
Does HTTPS have a big impact on security?
UPD: what would you advise to read about the security of WP, and sites in general?

Answer 1

Another possible hack is null themes and plugins. Well, for example, when you decided to save money and took a premium plugin or template from warez or clubhouses (which means you should do it - you wanted to deceive everyone and that's how it happened ...). So there is a high probability that you will be broken soon. Do not be stingy - buy the premium plugins you need from their authors. The authors value their reputation and will not build backdoors. Yes, and you are calmer with those support and updates.
Already very often on the support forums questions began to be raised that the hosters found the vir and blocked the acc. And it turns out where it shouldn't be, files like proxy.php are stuffed in
. And if using WordPress, update to the current version on time and everything will be fine.

Answer 2

Known wordpress vulnerabilities:
www.cvedetails.com/product/4096/Wordpress-Wordpress...

Answer 3

Above, everything was correctly explained about Wordpress, its plugins and themes. I can also add that with insufficient resources on hosting or unwillingness to buy security plugins for full use, you can check the site from the outside, the so-called. black box, something specific, especially for WP. Offhand, these are:
- https://wprecon.com
- https://metascan.ru
- https://hackertarget.com/wordpress-security-scan/

Answer 4

I will advise you an article about the Zoom framework and how to check your WordPress engine for vulnerabilities...