{"id":4149,"date":"2026-08-20T20:10:16","date_gmt":"2026-08-21T00:10:16","guid":{"rendered":"https:\/\/blog.funio.com\/en\/?p=4149"},"modified":"2026-08-20T20:10:18","modified_gmt":"2026-08-21T00:10:18","slug":"lets-talk-security","status":"publish","type":"post","link":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/","title":{"rendered":"Let\u2019s Talk Security!!"},"content":{"rendered":"\n

Mid-Year Website Security Checkup: Critical Vulnerabilities and how to protect your websites from them.<\/strong><\/p>\n\n\n\n

Whether you run a personal blog, an online store, or a business website, security should always be part of your regular website maintenance. <\/p>\n\n\n\n

Over the past couple of months, several high-profile vulnerabilities have affected popular web applications and server software. While security issues are constantly discovered across the internet, the good news is that most successful attacks can be prevented with a few simple maintenance habits. <\/p>\n\n\n\n

Let\u2019s go over the recent vulnerabilities and walk through practical steps any site owner can do to keep their site up to date with the latest best practices in the industry.  <\/p>\n\n\n\n

What is a CVE?<\/h3>\n\n\n\n

CVE stands for Common Vulnerabilities and Exposures<\/strong>. These threats are detected and categorized by an identifying number to keep track of publicly known software security flaws. \u00a0
Usually, when developers discover a vulnerability, they release a security update that fixes it as quickly as they can. The biggest risk isn’t that vulnerabilities exist\u2014it’s when websites continue running outdated software after a fix has already been released.<\/p>\n\n\n\n

Recent Security Highlights\u00a0<\/h3>\n\n\n\n

Several important vulnerabilities were disclosed recently on widely used content management systems that are used by millions of people everyday. A content management system, or CMS, is software that lets users create, edit, and manage website content without needing to write all the code themselves. Today, I will discuss a few of the most relevant ones related to our products that we offer and what you can do to avoid being affected by these latest discoveries.  <\/p>\n\n\n\n

WordPress:<\/strong> On July 17, 2026, WordPress released a security update addressing two serious vulnerabilities in WordPress Core: CVE-2026-60137 and CVE-2026-63030. These issues affected the core WordPress software and involved weaknesses in how certain requests and database operations were handled. If exploited, attackers could potentially gain unauthorized access and take control of a vulnerable website. Website owners running WordPress 6.8.x should update to WordPress 6.8.6<\/strong>, users on the 6.9.x branch should update to 6.9.5<\/strong>, and users on WordPress 7.0.x should update to 7.0.2<\/strong> or later to apply the security fixes. <\/p>\n\n\n\n

Joomla:<\/strong> Joomla recently released security updates addressing vulnerabilities in Joomla Core. One of the latest issues, tracked as CVE-2026-48958<\/strong>, involved incorrect access controls within Joomla web service endpoints. The vulnerability could allow unauthorized users to perform actions they should not have permission to complete. The issue affected Joomla versions 4.0.0 through 5.4.6<\/strong> and 6.0.0 through 6.1.1<\/strong>. Joomla administrators should update to Joomla 5.4.7 or Joomla 6.1.2<\/strong> to ensure these security protections are applied. <\/p>\n\n\n\n

 
We always encourage and suggest that website owners keep their websites, themes, plugins, and extensions up to date as often as possible to prevent being affected by exploits like these. <\/p>\n\n\n\n

Remember:<\/strong> An outdated plugin is often a bigger security risk than the server itself.<\/p>\n\n\n\n

How to update WordPress and Joomla<\/h3>\n\n\n\n

Luckily these are very popular CMS so there is a plethora of videos, forums, and groups online that provide instructions on how to update your site but here is the instructions for each:\u00a0
\u00a0
WordPress\u00a0
https:\/\/developer.wordpress.org\/advanced-administration\/upgrade\/upgrading\/<\/a>\u00a0
\u00a0
Joomla \u00a0
https:\/\/guide.joomla.org\/user-manual\/migration\/migration-version-update<\/a><\/p>\n\n\n\n

The 4 Biggest Ways Websites Get Compromised\u00a0<\/h3>\n\n\n\n

Most hacked websites share one of these common causes no matter what type of code, content management systems, or web application firewalls they may use. <\/p>\n\n\n\n

1. Outdated Website Software\u00a0<\/strong>
\u00a0
WordPress, Joomla, Drupal, ColdFusion applications, PHP-based websites, and other web platforms regularly release security updates.\u00a0<\/p>\n\n\n\n

As discussed earlier regarding the latest vulnerabilities, running outdated software significantly increases the risk of attackers exploiting known security flaws. <\/p>\n\n\n\n

Be sure to keep the following up to date: <\/p>\n\n\n\n

    \n
  • Core CMS or application software\u00a0<\/li>\n\n\n\n
  • PHP version\u00a0<\/li>\n\n\n\n
  • Plugins\u00a0<\/li>\n\n\n\n
  • Themes\u00a0<\/li>\n\n\n\n
  • Templates\u00a0<\/li>\n\n\n\n
  • Extensions\u00a0<\/li>\n<\/ul>\n\n\n\n

    2. Weak Passwords\u00a0<\/strong><\/p>\n\n\n\n

    Strong passwords remain one of the easiest ways to improve security. <\/p>\n\n\n\n

    Use unique passwords for crucial access points to your site like: <\/p>\n\n\n\n

      \n
    • cPanel\u00a0\u00a0<\/li>\n\n\n\n
    • WordPress \/Joomla Administrator\u00a0\u00a0<\/li>\n\n\n\n
    • FTP\/SFTP\u00a0\u00a0<\/li>\n\n\n\n
    • SSH\u00a0\u00a0<\/li>\n\n\n\n
    • Email accounts\u00a0\u00a0<\/li>\n\n\n\n
    • Database users\u00a0\u00a0<\/li>\n<\/ul>\n\n\n\n

      Consider using a reputable password manager so you don’t have to remember them all and you can make them more complex. Also, rotating them as often as you are able to is advised.  <\/p>\n\n\n\n

      3. Old Plugins and Extensions\u00a0<\/strong><\/p>\n\n\n\n

      Many website compromises originate from third-party plugins rather than the CMS itself. <\/p>\n\n\n\n

      Ask yourself: <\/p>\n\n\n\n

        \n
      • Do I still use this plugin?\u00a0\u00a0<\/li>\n\n\n\n
      • Is it still supported?\u00a0\u00a0<\/li>\n\n\n\n
      • Has it been updated recently?\u00a0\u00a0<\/li>\n<\/ul>\n\n\n\n

        If the answer is no to any of these, consider removing it. <\/p>\n\n\n\n

        4. Backup Availability\u00a0<\/strong><\/p>\n\n\n\n

        Backups won’t prevent an attack\u2014but they can dramatically reduce downtime if something goes wrong. If your website becomes corrupted, infected, or accidentally deleted, a recent backup can save hours\u2014or days\u2014of work.<\/p>\n\n\n\n

        Funio Backup procedure and Expectations<\/h3>\n\n\n\n

        Here at Funio we provide a courtesy backup of your sites email, web, and database files. These backups are collected every night and retained for 14 days. \u00a0
        \u00a0
        Although we provide these backups, they are not guaranteed. In rare cases backup files can be corrupted or may fail to be collected. It is highly encouraged that our users create their own backup schedule that works for them. Also, it is helpful to collect backups before any major updates to the site. That way, you can easily revert if something goes wrong.<\/p>\n\n\n\n

        That\u2019s all for now<\/h3>\n\n\n\n

        Thanks again for stopping by and taking the time to familiarize yourself with the latest best security practices. Websites are a little like houseplants: ignore them for too long and things start getting weird. A forgotten update here, an outdated plugin there, and suddenly your peaceful little corner of the internet has become a playground for troublemakers. So water your website, give it some love, back it up before the storms arrive, and keep those updates rolling. Your future self (and your visitors) will thank you. \u00a0
        \u00a0
        Until next time!\u00a0
        \u00a0
        Joke of the month- \u00a0
        What is a hacker’s favorite sport? Phishing!<\/strong><\/p>\n\n\n\n

        <\/p>\n","protected":false},"excerpt":{"rendered":"

        Mid-Year Website Security Checkup: Critical Vulnerabilities and how to protect your websites from them. Whether you run a personal blog, an online store, or a business website, security should always be part of your regular website maintenance.  Over the past couple of months, several high-profile vulnerabilities have affected popular web applications and server software. While […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[6],"class_list":["post-4149","post","type-post","status-publish","format-standard","hentry","category-funio","tag-default"],"yoast_head":"\nLet\u2019s Talk Security!! - Funio Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Let\u2019s Talk Security!! - Funio Blog\" \/>\n<meta property=\"og:description\" content=\"Mid-Year Website Security Checkup: Critical Vulnerabilities and how to protect your websites from them. Whether you run a personal blog, an online store, or a business website, security should always be part of your regular website maintenance.  Over the past couple of months, several high-profile vulnerabilities have affected popular web applications and server software. While [...]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Funio Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/FunioHosting\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-21T00:10:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-21T00:10:18+00:00\" \/>\n<meta name=\"author\" content=\"Funio Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@funiohosting\" \/>\n<meta name=\"twitter:site\" content=\"@funiohosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Funio Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/\"},\"author\":{\"name\":\"Funio Team\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/#\\\/schema\\\/person\\\/9a16174d2c7c5cdc03acc6d11636e922\"},\"headline\":\"Let\u2019s Talk Security!!\",\"datePublished\":\"2026-08-21T00:10:16+00:00\",\"dateModified\":\"2026-08-21T00:10:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/\"},\"wordCount\":980,\"commentCount\":0,\"keywords\":[\"Default\"],\"articleSection\":[\"Funio\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/\",\"url\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/\",\"name\":\"Let\u2019s Talk Security!! - Funio Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/#website\"},\"datePublished\":\"2026-08-21T00:10:16+00:00\",\"dateModified\":\"2026-08-21T00:10:18+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/#\\\/schema\\\/person\\\/9a16174d2c7c5cdc03acc6d11636e922\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/2026\\\/08\\\/lets-talk-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Let\u2019s Talk Security!!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/\",\"name\":\"Funio Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/#\\\/schema\\\/person\\\/9a16174d2c7c5cdc03acc6d11636e922\",\"name\":\"Funio Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/789911ce0524635aa64ef3ac5b97fe3b5b8cafb4afdddbc0512e59a1ef260ed6?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/789911ce0524635aa64ef3ac5b97fe3b5b8cafb4afdddbc0512e59a1ef260ed6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/789911ce0524635aa64ef3ac5b97fe3b5b8cafb4afdddbc0512e59a1ef260ed6?s=96&d=mm&r=g\",\"caption\":\"Funio Team\"},\"sameAs\":[\"http:\\\/\\\/funio.com\"],\"url\":\"https:\\\/\\\/blog.funio.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Let\u2019s Talk Security!! - Funio Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/","og_locale":"en_US","og_type":"article","og_title":"Let\u2019s Talk Security!! - Funio Blog","og_description":"Mid-Year Website Security Checkup: Critical Vulnerabilities and how to protect your websites from them. Whether you run a personal blog, an online store, or a business website, security should always be part of your regular website maintenance.  Over the past couple of months, several high-profile vulnerabilities have affected popular web applications and server software. While [...]","og_url":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/","og_site_name":"Funio Blog","article_publisher":"https:\/\/www.facebook.com\/FunioHosting","article_published_time":"2026-08-21T00:10:16+00:00","article_modified_time":"2026-08-21T00:10:18+00:00","author":"Funio Team","twitter_card":"summary_large_image","twitter_creator":"@funiohosting","twitter_site":"@funiohosting","twitter_misc":{"Written by":"Funio Team","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/#article","isPartOf":{"@id":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/"},"author":{"name":"Funio Team","@id":"https:\/\/blog.funio.com\/en\/#\/schema\/person\/9a16174d2c7c5cdc03acc6d11636e922"},"headline":"Let\u2019s Talk Security!!","datePublished":"2026-08-21T00:10:16+00:00","dateModified":"2026-08-21T00:10:18+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/"},"wordCount":980,"commentCount":0,"keywords":["Default"],"articleSection":["Funio"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/","url":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/","name":"Let\u2019s Talk Security!! - Funio Blog","isPartOf":{"@id":"https:\/\/blog.funio.com\/en\/#website"},"datePublished":"2026-08-21T00:10:16+00:00","dateModified":"2026-08-21T00:10:18+00:00","author":{"@id":"https:\/\/blog.funio.com\/en\/#\/schema\/person\/9a16174d2c7c5cdc03acc6d11636e922"},"breadcrumb":{"@id":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.funio.com\/en\/2026\/08\/lets-talk-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.funio.com\/en\/"},{"@type":"ListItem","position":2,"name":"Let\u2019s Talk Security!!"}]},{"@type":"WebSite","@id":"https:\/\/blog.funio.com\/en\/#website","url":"https:\/\/blog.funio.com\/en\/","name":"Funio Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.funio.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.funio.com\/en\/#\/schema\/person\/9a16174d2c7c5cdc03acc6d11636e922","name":"Funio Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/789911ce0524635aa64ef3ac5b97fe3b5b8cafb4afdddbc0512e59a1ef260ed6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/789911ce0524635aa64ef3ac5b97fe3b5b8cafb4afdddbc0512e59a1ef260ed6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/789911ce0524635aa64ef3ac5b97fe3b5b8cafb4afdddbc0512e59a1ef260ed6?s=96&d=mm&r=g","caption":"Funio Team"},"sameAs":["http:\/\/funio.com"],"url":"https:\/\/blog.funio.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts\/4149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/comments?post=4149"}],"version-history":[{"count":2,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts\/4149\/revisions"}],"predecessor-version":[{"id":4151,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/posts\/4149\/revisions\/4151"}],"wp:attachment":[{"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/media?parent=4149"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/categories?post=4149"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.funio.com\/en\/wp-json\/wp\/v2\/tags?post=4149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}