[Coinlv]

My sister's website (business website) is hacked more than 3 times in the past 1 year and I hardly see any reasons for this. It's a very small business company and so has no reasons to be famous enough to be specifically targeted. How can one improve the security of a WordPress website? Give some detailed tips and strategies to prevent future hacking.

[thisnthat]

One of the simplest suggestions is making sure her software isn't out of date. She can get automatic updates from Wordpress itself, but she'll still need to check for updates for themes and update her plugins. There are sometimes important security updates and a lot of people just ignore them.

[domondon1]

just secure your site there s many script to avoid the hack or method to prevent the hacker to get some information and update always your software

[walash]

First of all, update everything as cited above. Most Wordpress' hacks are made through outdated plugins.

Once everything is updated and ready, install this plugin: https://wordpress.org/plugins/gotmls/
I had several Brute Force attacks few months ago and this plugin saved one of my websites.

There's no reason on why hackers would be targetting your sister's website if its not well ranked on Google (if it is, it's probably competition). Some hackers scrap thousands of wordpress based websites and try to hack it through Brute Force attacks to use them as phishing, spamming and scamming.

Also, tell your sister to change her password for something really unusual with special characters and numbers, such as QwErty.1@3$5 instead of qwerty12345. BF attacks are way harder that way.

Cheers,

Wal

[bluegreen]

Basically you need to put some scripts on your site to make it harder to hack it. And never give away info about the site, not even to your moderators! And always update the software when a new version is available, that's very important as well!

[silverleafy]

yes update all your plugins and be sure you dont use a pirated theme cause that may also be exploited