Site appearance
Check WordPress access: unknown accounts, rejected application passwords and targeted revocation. Preserve data and verify retained permissions.
18 guides
Do you not recognise a WordPress administrator account? Verify its origin, preserve evidence, and limit access with the person responsible for the site.
Read the guide →Does your WordPress site open an unknown destination? Distinguish browser issues, misconfigured rules and intrusions, preserve evidence and fix the correct layer.
Read the guide →Fix a 401 rejection, then manage WordPress application access: identity, HTTPS, rotation, targeted revocation and checks of retained tools.
Read the guide →Is a WordPress client failing over XML-RPC? Check the endpoint, authentication, and blocking rule, then validate a draft on a copy.
Read the guide →Do all visitors share one IP in Wordfence? Compare networks, check headers and trusted proxies, then verify detection.
Read the guide →Wordfence scan stuck or interrupted? Keep the log, check startup and per-stage limits, then test one setting with a rollback plan.
Read the guide →Identify the address still allowed to reach the WordPress database, check current consumers, and remove the unnecessary host in cPanel.
Read the guide →Create a replacement Cloudflare API token for WordPress, check its resources and operations, then remove the old access at the right level.
Read the guide →Check RSS and Atom responses after applying a WordPress restriction, search for demonstration content, and verify copies served by caches.
Read the guide →Locate source maps for WordPress scripts, compare their content with the approved package, and control their distribution after deployment.
Read the guide →Correct the domain, v3 pair, or reCAPTCHA key override in Contact Form 7, then verify a synthetic submission on an authorized copy.
Read the guide →Check the syntax and effects of an AI-proposed PHP snippet, test it on a local copy and verify how to roll back.
Read the guide →Does the WordPress biography remain after erasure? Empty the profile field, check public copies and retain posts attributed to the author.
Read the guide →After a departure, inventory your organization’s access, have official support verify the owner and prepare authorized credential rotation.
Read the guide →Check owner, group and permissions on a WordPress copy. Reduce an excessive permission and verify access on Linux or Windows.
Read the guide →Use the administration interface to check where WordPress logs and backups are stored, who can view them, and restoration on a local copy.
Read the guide →Identify who issued the warning, check the site’s official report and track the review through your organization’s authorized accounts.
Read the guide →Compare WordPress inventories and the owner’s logs, distinguish a reappearance from an old display and verify recovery on a copy.
Read the guide →