The FBI gave an official warning today about perpetrators defacing wordpress sites by exploiting technical vulnerabilities. They’re not members of ISIS but are using their name to “gain more notoriety”. Long story short, if you haven’t updated your plugins and/or wordpress version in a while – do so now!

The FBI recommends the following actions be taken:

Review and follow WordPress guidelines:

http://codex.wordpress.org/Hardening_WordPress

Identify WordPress vulnerabilities using free available tools such as:/h3>

http://www.securityfocus.com/bid
http://cve.mitre.org/index.html
https://www.us-cert.gov/

Update WordPress by patching vulnerable plugins:/h3>

https://wordpress.org/plugins/tags/patch

Run all software as a non-privileged user, without administrative privileges, to diminish the effects of a successful attack
Confirm that the operating system and all applications are running the most updated versions.

If you want a paid plugin to keep your site protected, you can always read our swift security review.