These are some security tips for [[Wordpress]] Hardening Permissions: * Ensure no upload_file permissions on any roles. * This hit one of the sites I manage, a plugin enabled upload_file for subscribers to upload media images to user content, ended up with lewd imagery being uploaded to a Christian website...