ACME starts as a webshop built on WordPress and WooCommerce, with about thirty plugins. Most attacks on shops like this use known weaknesses in plugins that were not updated, or stolen administrator passwords. This chapter tells how ACME's shop was broken into through an old plugin in 2020, and what a small shop does to prevent it: few plugins kept up to date, protected administrator accounts, card payments left to the payment provider, and backups that have been tested.
Read it on keibisoft.com: Keeping a WooCommerce webshop up to date and secure
Part of the series Building a security program for a growing company.
