Site hacked?

WordPress security consultancy

We know how WordPress breaks.

We've been building it since 2007. Now we help you keep it secure.

Security audits, hardening and hacked-site recovery from the team behind Gabfire Themes. We find what's exposed, fix it, and watch new plugin vulnerabilities for you.

Book a security audit Check your plugins free

What we do

Consultation, then hands-on fixes

Some clients want a second opinion. Others want us to log in and handle it. We do both, and we tell you plainly what's urgent and what can wait.

Assess

Security audit

A full review of your WordPress install with a written report, ranked by real risk.

  • Core, plugin and theme versions against known CVEs
  • User roles, admin accounts and login exposure
  • Server, PHP and file-permission review
Fix

Hardening & patching

We apply the fixes from the audit, or from your own scanner, on staging first.

  • Safe updates with rollback plans
  • WAF rules, 2FA, XML-RPC and REST lockdown
  • Virtual patches when no vendor fix exists
Respond

Hacked site recovery

Redirects, spam pages, a host suspension or a Google warning. We clean it, close the hole that let them in, and help with blacklist removal.

Get help now
Watch

Vulnerability monitoring

We track new disclosures against your exact plugin list and act when one affects you.

  • Daily matching against new CVEs
  • Patch or mitigate, then report
Advise

Consultation calls

An hour with a specialist to talk through an incident, a plugin choice, a hosting move or a compliance question.

Build

Code review for developers

Plugin and theme authors: we review nonces, capability checks, escaping and SQL before your next release.

Free resource

WordPress CVE database

Every WordPress core, plugin and theme vulnerability published to the CVE list in 2026. Search by plugin, CVE ID or weakness type.

Disclosures per week, 2026peak 643/wk
Week 1: 0 Week 2: 16 Week 3: 27 Week 4: 174 Week 5: 27 Week 6: 90 Week 7: 84 Week 8: 206 Week 9: 39 Week 10: 132 Week 11: 188 Week 12: 141 Week 13: 170 Week 14: 44 Week 15: 241 Week 16: 110 Week 17: 70 Week 18: 67 Week 19: 63 Week 20: 106 Week 21: 93 Week 22: 194 Week 23: 95 Week 24: 64 Week 25: 442 Week 26: 240 Week 27: 147 Week 28: 191 Week 29: 224 Week 30: 218 Week 31: 344 Week 32: 332 Week 33: 303 Week 34: 249 Week 35: 211 Week 36: 285 Week 37: 261 Week 38: 317 Week 39: 255 Week 40: 452 Week 41: 643 Week 42: 447 Week 43: 115 (in progress)
Loading database…Updated 21 Oct 2026

    Free stack check

    Is anything you run on this list?

    Paste your plugin and theme names or wordpress.org slugs, one per line. We match them against this year's disclosures. Nothing leaves your browser.

    A match means a vulnerability was published for that plugin. Compare the affected versions with what you have installed, or let us do it.

    Example list loaded. Replace it with yours.

    Have an expert check versions

    How an engagement runs

    From first message to monitored

    1. Tell us your setup

      Your URL, host, and plugin list. If you've been hacked, what you're seeing.

    2. We audit

      Read-only review first. You get a report with every finding ranked by risk.

    3. We fix

      Patching and hardening on staging, then production, with backups at every step.

    4. We keep watching

      Optional monitoring matches new disclosures against your stack.

    Gabfire Themes

    Still making premium themes

    The theme shop that started it all is open. Newspaper, magazine, business and niche themes, with the support our members have relied on since 2008.

    Over 40 themes built for clients, and Gabfire's support was the best tech support of any of them.

    Jean Pierre, Founder & Publisher, Scottsdale Lifestyles Magazine (paraphrased)
    Browse all 9 themesMember login

    From the blog

    Notes from the workbench

    WordPress fixes, snippets and hosting lessons from our own client work. Read the blog

    28 Mar 2023 · WordPress

    How to Display Captions for Featured Images with get_the_post_thumbnail_caption()

    Looking for an easy way to display captions for featured images on your WordPress website? The get_the_post_thumbnail_caption() function can help you do…

     24 Mar 2023 · WooCommerce

    Understanding the WC_Price Function in WooCommerce

    If you're an e-commerce store owner or a developer working with WooCommerce, you might have come across the WC_Price function. This function…

     28 Sep 2021 · Hosting

    Website on Plesk server and sudden 500 error

    After Apache got updated on our Ubuntu distro, we suddenly started have Error 500 of Plesk shown on all our sites. Then…