These WordPress mistakes may lead to numerous security vulnerabilities and affect your blog site.
1) Forgetting to update WordPress
It is often a good idea to set up the wordpress to update automatically. Always need to keep it at the latest version. Attackers scans the Internet looking for outdated installations, so it’s time to protect your wordpress site with uptodate version..
2) No Backup
Failure to create a backup may seem like a huge mistake, You only realize this when you fall in a hole and absolutely need the backup for rescue. We advise all to keep regular wordpress backup and plugins such as BackWPup, VaultPress, and BackupBuddy are most popular for this job.
3) Retaining the default admin username
The username admin is created when you install WordPress and it has administrative privileges. It is straightforward for someone who wants unauthorized access to your site to run a brute-force attack targeting the admin username. Therefore Change it to your own, hard to guess admin username.
4) Not Installing a Caching Plugin
Caching plugin allows you speed up your site and prevent downtime if you get a lot of traffic at once. This is very useful for wordpress sites with large visitor hit.
5) Using a Default Favicon
Favicons are the little icons that show up next to your page title in the browser window. This little favicon represent your website’s identity, so it is better to Change it.
6) No Permalinks
Many wordpress users simply use the default URL structure ( eg: /?p=12 ). This is not good for SEO. When installing WordPress, you can update your permalinks structure by going under Settings > Permalinks.
7) WordPress Theme from a Bad Source
This happens when you download WordPress themes ( same for plugins ) from a bad source. Some of these themes with malicious links and later you’ll hurt badly.


