Questions About Security Plugins

  • Unknown's avatar

    Dear, WordPress Team

    I would like setup an online store via wordpress platform.
    Kindly tell me, what kind of plugin I must instal to be sure my store is 100% controled, and is secured to avoid hackers.
    Also, I wanna add a plugin for Aliexpress, I’m gonna import products from there.
    If I buy this plugin how I can test or check it, to be sure it’s not a misterious plugin..I mean not a plugin through that the buyer could access my store’s backoffice
    There’s solutions, steps how we can check plugin that we instal?

    Looking forward for your reply,
    Sincerely, Elena

    The blog I need help with is: (visible only to logged in users)

  • Hi there,

    Please note that you can only set up an online store using plugins on WordPress.com if you have the Business Plan upgrade:

    https://wordpress.com/pricing/

    Kindly tell me, what kind of plugin I must instal to be sure my store is 100% controled, and is secured to avoid hackers.

    All sites on WordPress.com load over https by default, meaning all traffic to and from your site is encrypted. We also actively scan for viruses and malware and protect your site against brute force attacks, so any site with us already has very good security out of the box with the VaultPress and Jetpack plugins that are installed by default.

    As long as you have a secure password and two-factor authentication on both WordPress.com and your email account, no one should be able to hack into your account. And as long as you don’t install vulnerable plugins on your site (installing plugins require the Business Plan), it shouldn’t be possible for someone to hack your site directly either.

    That said, if you want more information on other security plugins you could use, the best place to ask in the WordPress.org forums where users are more familiar with the available options. Note that some security plugins might not be allowed with the WordPress.com Business Plan if they cause a conflict with the built in features.

    You can find the self-hosted forums here:

    https://wordpress.org/support/

    If I buy this plugin how I can test or check it, to be sure it’s not a misterious plugin..I mean not a plugin through that the buyer could access my store’s backoffice
    There’s solutions, steps how we can check plugin that we instal?

    The only way to really test out a plugin is to install it on a site, either a live site, a site installed locally on your computer, or via a service like http://poopy.life which allows you to create free testing sites for exactly this purpose.

    But also look for reviews of the plugin online. If the plugin is listed in the WordPress.org plugin directory at https://wordpress.org/plugins, you should be able to see there how many people have installed it and some of them might have left reviews there as well. You can also ask in the WordPress.org forum if other users there have experience with this plugin.

  • The topic ‘Questions About Security Plugins’ is closed to new replies.