Firstly, well done, this is something the other 95% of the world do not do on a regular basis! However, it is sometimes not good enough.

  • Backdoors – these bypass normal methods of accessing your site, e.g. via scripts or hidden files. An example was the Tim Thumb vulnerability in 2013.
  • Pharma hacks – an exploit used to insert rogue code into out of date versions of WordPress.
  • Brute-force login attempts – when hackers use automation to exploit weak passwords and gain access to your site.
  • Malicious redirects – when backdoors are used to add malicious redirects to your site.
  • Cross-site scripting (XSS) – the most common vulnerability found in WordPress plugins, these inject scripts that then allow a hacker to send malicious code to the user’s browser.
  • Denial of Service (DoS)- when errors or bugs in a website’s code are used to overwhelm a website so it no longer functions.