Secure a WordPress site

Establish a reference state

Inventory essential plugins, themes, administrative accounts and services. Keep a usable backup and define the functions that must be tested after changes.

Validation example

After updating or hardening, test administration with the intended accounts, a form and important site pages. Review relevant logs and confirm that the recovery procedure remains available.

Useful evidence

1. Reviewed versions and components, applied changes and test results.
2. Rollback backup and list of outstanding actions.