WP Guard Journal

WordPress security, in the open

Vulnerability breakdowns, network findings, and practical guidance from the team managing hundreds of sites.

On October 21, 2026, the PHP team shipped an emergency fix for two flaws that let an attacker run code on your…

WordPress just dropped below 40% of all websites (measured by domains with websites). This is the first time in its history that…

If your WordPress site suddenly shows pages full of Japanese text, you’re dealing with the Japanese keyword hack. It’s a common SEO…

The pharma hack sneaks spam into search results while your site looks fine to you. If a site owner faces this, search…

Looking to remove hacked content from Google search results? Don’t worry, the team at WP Guard is here to help you out.…

When you clean a hacked site, Google’s “dangerous site” warning doesn’t automatically disappear. In fact, some site owners don’t realize the warning…

Did you know a blacklisted site gets flagged as dangerous before a single visitor even loads the page? Well, that’s the worst-case…

Google Safe Browsing checks billions of URLs daily for malware, phishing, and unwanted software. If it flags your site, users will see…

You can fix a WordPress redirect hack by removing malicious code, restoring clean files, and closing the security gap that allowed the…

You delete hundreds of spam comments before bed. However, by morning, your WordPress site is full of them again. Sound familiar? Unfortunately,…