1. Updates
Keeping WordPress, plugins and themes up to date is one of the simplest ways to reduce risk. Outdated software can leave known vulnerabilities in place for far longer than they should be.
- Update WordPress core regularly
- Keep plugins and themes current
- Remove anything old or no longer in use
- Avoid letting updates build up over time