Malware targets 30 unpatched WordPress plugins

Yikes. Scary to see WooCommerce on this list. We have quite a few clients using that plugin. It’s a pretty popular plugin.

Wordpress I feel like is #1 concern when it comes to unsecure websites

Sooo many use it for its ease of use but don’t think about the security 

I think you’re right @TylerM. Though kind of the same way Windows is the #1 target for computer security.

I think Wordpress is like most things in technology. In order to keep it secure, you need to keep it patched. The caveat is you also have to keep all your plugins patched as well. This is where it is important to only use plugins that are in active development. I’ve seen so many sites where the plugins are “updated,” but have several plugins that were abandoned years ago.

It’s like having the latest version of Adobe Flash installed. Sure, it’s updated, but it hasn’t been touched in years.

Wordpress has followed a similar path as Microsoft has with Windows patching. They now force Wordpress updates. Most plugins have the option to configure auto-updates. The ones that don’t probably shouldn’t be installed anyway.

Unfortunately, too many people pay a developer to throw up a website and never touch it again. Developer got paid and is out of the picture, so no one maintains the site. It’s a recipe for disaster.