A plugin update is months behind and the vendor is gone

When the request is all in one security wordpress, we look at the live site first. The check we expect to matter is: a plugin update is months behind and the vendor is gone.

A specific fault, not a slogan

• A plugin update is months behind and the vendor is gone
• Two people share one admin password
• File editing from the dashboard is still turned on
• An extra administrator showed up in the user list

What gets checked

If the site is already compromised, cleanup comes before the lock-down. Locking a site that still has a strange admin user just hides the problem.

• The WordPress and PHP versions
• Plugins and themes, including inactive ones
• Every user with administrator rights
• A backup that is not stored only on the same account

What you can send first

If the site is already compromised, we clean that before we add restrictions. A lock on a dirty site feels safer and is not.

Security work is users, updates, file changes, and the login. You should still be able to edit the site when we are done, and you should know which password changed.

If you are outside Toronto, the call is the same. We say what we found and what the work is before we change the site.

Call 905-426-1784. We look at the site and tell you what the work is before it starts. The service page for this is WordPress security.