How secure is Wordpress?

Question

CMS

I make sites on wordpress, but somehow I still wasn’t interested in how secure this CMS is. Googling, I found out for myself that there are even plenty of holes in it. So, friends, I ask you to share your experience and give something to read on the subject.

Answer 1

Captcha and a good hoster)))

Answer 2

There is a wpscan utility.
It makes sense to set her on a site with WordPress and read the report.
And not only to the author of the question, but in general to all those who like to make websites on WordPress.

Answer 3

I am using a script to check files. There is a task on the crown that executes the script every minute. The task of the script is to scan all files recursively in a specific folder (website). When changing, uploading a new file, an alert falls on the mail, and on my smartphone I will find out about it in 2 minutes.
The script from this site is a little finished.
I share -tyts
Try it - it helps a lot. It's good to find out that you have been scammed and immediately cut off ftp, ssh, localizing the threat.

Answer 4

Everything that is popular and open source will always be leaky ..
As it were, there can be no protection options. Just follow the updates and apply fixes in time.

Answer 5

I did the following to protect against brute:
http://www.webhostinghub.com/support/news/general/wp-login-brute-force-attack

Answer 6

There are tons of security plugins... Search, look at the reviews, most of them close ~90% of loopholes, the rest depends on the developers

Answer 7

It is interesting to hear the opinion of practitioners. Are there any WordPress site builders? What do you use to protect yourself? What would you recommend?