Tag

Security

Website security threats, protection strategies, and hosting security.

26 articles

Website security is a moving target. New vulnerabilities appear in CMS plugins, brute force attacks run around the clock, and phishing campaigns get more convincing every year. If you're running a business website, security isn't something you set up once and forget about.

These articles cover the threats that affect UK businesses online: what the attacks look like, how hosting-level protection works, and the steps you can take to reduce your attack surface without needing a cybersecurity degree.

Explore topics
WordPress Hosting UK Business Small Business AI Visibility SEO Web Hosting Content Strategy AI Discovery Files WordPress Digital Marketing
Security 15 May 2026

Avada Builder Just Patched a 1M-Site SQL Injection. The WooCommerce Deactivated Trap Is the Buried Lead.

Wordfence disclosed CVE-2026-4798 in Avada Builder this week, affecting over 1,050,000 WordPress installations. The headline is patch to 3.15.3. The buried lead almost nobody covered is the WooCommerce-installed-then-deactivated precondition that turns the SQL injection from a "1M sites at risk" panic into a much narrower exploit window. We have held Avada licences for years and patched our portfolio first. Here is what actually matters.

7 min read Read
Domains 24 Feb 2026

How to Set Up DNS Records for Your Domain

DNS records control where your website loads and where your email goes. Get one wrong and visitors see an error page, or emails vanish. This guide walks through every record type, from A records and CNAMEs to SPF, DKIM, and DMARC, with instructions that work at any registrar.

11 min read Read
News 16 Dec 2025

Grok's Bondi Errors Show AI Risks for UK WordPress Sites

Grok AI spread false information about the Bondi Beach terrorist attack, inventing a fictional hero and misidentifying victims. Here's why UK WordPress site owners using AI for content need to pay attention to the Online Safety Act and implement proper verification workflows.

10 min read Read
Security 10 Dec 2025

131,000 Attacks Target WordPress Sites via Sneeit RCE Flaw

A critical remote code execution flaw in the Sneeit Framework WordPress plugin (CVE-2025-6389, CVSS 9.8) has triggered 131,000+ attack attempts. Attackers are creating admin accounts and uploading backdoors. Here's how to check if you're compromised and what to do right now.

8 min read Read
Security 4 Dec 2025

King Addons Hack Lets Anyone Become WordPress Admin

A critical vulnerability in King Addons for Elementor (CVE-2025-8489) lets anyone create an admin account on your WordPress site. Over 48,400 exploit attempts logged since October. Here's how to check if you're compromised and lock it down.

9 min read Read
Back to all articles