2024 WordPress Vulnerability Report Shows Errors Sites Keep Making

WordPress security scanner WPScan’s 2024 WordPress vulnerability report calls attention to WordPress vulnerability trends and suggests the kinds of things website publishers (and SEOs) should be looking out for. The WPScan vulnerability report found that about 22% of reported vulnerabilities required subscriber level or no authentication at all, representing the most exploitable vulnerabilities. Website Security Should Be Considered As Technical SEOSite audits don’t normally cover website security but in my opinion every responsible audit should at least talk about security headers. According to the WPScan report, the main point of entry for hacked websites were leaked credentials and weak passwords. Lastly, a WordPress firewall and website hardening are also useful proactive approaches to website security.