Operational playbook · WordPress agencies

Hardening WordPress

XML-RPC, plugins, headers and update discipline.

Priorities

  • Disable or constrain XML-RPC where unused
  • Patch vulnerable plugins promptly
  • Enforce TLS and security headers
  • Use Standards to prevent drift