OWASP Top 10:2025 for WordPress, explained
The OWASP Top 10:2025 mapped to WordPress: what each risk looks like in plugins, themes and settings, and the checks owners and developers can run.
WordPress security & EU compliance guides — Page 3
NIS2 and your WordPress site: are you in scope?
NIS2 and WordPress: check if your company, agency or hosting business is in scope, what suppliers should expect, and which Art. 21 measures affect your site.
Google Fonts and GDPR: self-host fonts on WordPress
Google Fonts and GDPR: what the Munich court ruled, why the Data Privacy Framework doesn't settle it, and how to find and self-host fonts on WordPress.
Hacked WordPress site? The GDPR 72-hour breach notification
Hacked WordPress site? When a hack is a GDPR data breach, when the 72-hour notification clock starts, what to report, what to document, and who to inform.
GDPR Article 32 for WordPress: what 'appropriate security' means
GDPR Article 32 and WordPress security in practice: encryption, updates, access control, tested backups, regular scans, records and processor contracts.
Cyber Resilience Act: what WordPress plugin sellers must do
Cyber Resilience Act for WordPress plugin and theme sellers: reporting duties since 11 September 2026, the December 2027 obligations, and a to-do list.