Recent critical vulnerabilities in the WordPress core have underscored the importance of protecting your website beyond WordPress itself. Attackers exploited unpatched releases across versions 6.8, 6.9, and 7.0 (including the 7.1 beta) within hours to gain control of websites.
Our Web Application Firewall (WAF) proactively protects all sites on our platform by blocking malicious requests at the network edge before they reach WordPress. We enhance industry-standard firewall rules with custom filters developed by our security experts, and every hosted site undergoes daily malware scanning.
Many hosts depend on third-party control panels and security products that are released on a schedule dictated by others. Since we build and operate our own platform, our security team can deploy protection directly across it without waiting for other providers.
These layers offer robust protection and substantially lower the risk, but they don’t replace patching. Immediately update the affected installations, and then thoroughly check any sites that might have been compromised for unfamiliar administrator accounts or unexpected plugin and file modifications.
Our on-site caching plugin now enables you to set auto-updates to security releases exclusively. By doing so, your WordPress site can automatically update when security patches are released. This is the preferred setting because it allows you to safeguard against vulnerabilities without triggering errors due to plugin conflicts caused by auto-updating core releases.
