ByDavey Winder,

Senior Contributor.

While most cybersecurity headlines these days tend to emphasize, quite rightly, critical updates for Windows users as attacks get underway, or emergency updates for the Chrome web browser, even hacking attempts against PayPal and LastPass users, the humble website is often overlooked. Not, however, by hackers themselves, though, as this latest warning from the threat intelligence team at Wordfence demonstrates. In just 48 hours, a total of 8.7 million attacks targeting WordPress website users have been reported. Here’s what you need to know, and do, to keep your site and its visitors safe.

WordPress remains one of the most popular ways to create a website, with the latest statistics suggesting it has a 43.5% market share amongst all websites and a 61.4% share when it comes to those with a content management system. Indeed, the same source reports that “over 70% of new CMS-built websites are created with WordPress, and about 1.2 million new WordPress sites are added globally each year.” No wonder, then, that these sites are a target for hackers.

Unfortunately, WordPress website owners make it easy for attackers by using outdated plugins. That’s the basis of a new warning from the threat experts at WordPress security specialists Wordfence.