Best practices
- Keep core, themes, and plugins updated.
- Use reputable plugins and remove unused ones.
- Limit login attempts and enable 2FA.
- Schedule automatic backups and test restores.
Plugins
- Security plugin (WAF + login limits)
- Backup plugin (incremental, off‑site)