Securing a WordPress site

WordPress powers a large share of the web — and so draws attackers' attention, mostly through outdated plugins and themes. Keeping the core, extensions and accounts updated, and watching for known vulnerabilities, deflects the vast majority of automated attacks.