WordPress Security Checklist: 15 Checks for a Safer Website
Each check says what to do, where to find it and how to tell it's really done, starting with the ones that close the most doors.

Each check says what to do, where to find it and how to tell it's really done, starting with the ones that close the most doors.
Microsoft's new controls will let you block AI training and still appear in AI answers, but the dates matter as much as the settings.
Advertisers gain more markets and a wider ad format, but ChatGPT can now rewrite your ads unless you opt out.
A shared policy token would set broad AI training preferences alongside company-specific rules, with Google aiming to support it in 2027.
Barry Schwartz says he hasn't seen anyone else publish data like it, and the organic result is the part to watch.
Before you blame Gemini for a traffic drop, check your Direct channel and your server logs.
Ad tech firms like ID5 are moving identity work onto publisher servers, while WPP argues its data business barely feels the change.
Meta says it's "too early to share a long-term monetization model", while Instagram has approached "select" YouTubers with offers up to $500,000.
Reddit's search referrals dropped by more than 1 million on average per week in October, and the company now wants people to sign in.
Simpler buying is the pitch, but the real question is how much you can still see once Amazon's AI makes the calls.
You can block bots collecting content while letting assistants fetch pages to answer users.
The earnings figure points to a bigger role for living room viewing in YouTube's ad business.
Restaurants can now switch off individual ordering providers from their Google dashboard.
Some public Discord server chats are heading into search results, and server admins have until November 16 to decide what's public.
More AI searches are bringing new ad placements, but Google's Q3 remarks gave no figure for traffic to websites.
The ServiceNow MCP plugin is available now; voice, security and Codex features are slated for 2027, with richer plugin features due by the end of 2026.
The test changes when eligible creators can collect revenue, not who qualifies for the YouTube Partner Program.
Fixes are being backported to eligible security branches, currently through WordPress 4.7.
Agents did better through WordPress's built-in API, because the MCP Adapter doesn't yet bundle the abilities they need.
For SaaS and service businesses, it's a new way for customers to use your service without visiting your site.
For restaurant owners and local marketers, TikTok is making the path from food video to booking easier to follow.
Freshworks' Robusta uses AI to investigate outages and identify root causes, and it is being brought into Freshservice alongside FireHydrant.
The deal shows how established SaaS companies can use acquisitions to add AI to products built for a specific industry.
John Mueller says Google rewrote the line so AI tools could debug missing favicons better.
The admin no longer bundles its scripts, and that change can trip up old firewall rules and image plugins.
If a keyword dropped for no reason in the last two months, check Search Console before you change anything.
YouTube says it is developing more monetization pathways for microdramas, and members-only episodes on mobile get a new viewer experience.
Three Search Central documentation changes in Google's updates log are dated October 21, 23 and 26.
The cheaper model is built for screen work like forms, drawings and video edits, and it's aimed squarely at cost.
Gulf and Egyptian creators can join from 500 subscribers and Indian creators can tag Amazon too, but nobody has published commission rates.
Moonshot's new model scores close to Claude Opus 5.5 on a coding agent test at about half the token price.
The Salesforce overview marks Campaign Agent GA now, but CGC Agency says Salesforce's Dreamforce recap gave no availability dates.
Azoma's $11.2M Series A, led by Puma Growth Partners, sells brands software to track how AI shopping tools show their products.
Your old integration keeps working until you upgrade the SDK, which is exactly when it can break.
Brands are testing paid access for your free subscribers, and dynamic ad insertion for podcasts is open for early access sign-ups.
It's built for professionals and small business owners, and every send, payment or deletion still needs your approval.
Your dashboard can look fully updated while the PHP underneath is still open to attack.
Closing is expected in Salesforce's fiscal 2028, starting February 2027, and needs Braze shareholder and regulatory approval first.
Creators will be able to tag AliExpress products, but no commission rates have been published and no go-live date has been set.
The plugin update cuts the old keys, but it won't remove a backdoor that's already on your site.
Rank Math says to clean up before you install 3.0.124, so check your sites against the download window first.
A tap on your ad may now open a Meta page first, and each ad has its own on/off switch.
More links, placed higher, but still no click data to tell you if they send visits to your site.
The agent now works while you're logged out, so the question is what you let it touch.