Blog

Notes from inside hacked WordPress sites.

Threat research, walkthroughs of real-world WordPress compromises (anonymised), plain-English explainers for site owners, and field notes from the RedSecLabs team. New posts roughly fortnightly.

Wordpress Casino Spam
Blog / 14 min read / July 2026

WordPress Casino Spam: Detection, Removal & Prevention (2026 Guide)

WordPress casino spam is a black-hat SEO infection that injects gambling, betting, and “free spins” content into your site but only shows…

gazeblogadmin
Blog / 6 min read

How to Scan Your WordPress Website for Malware Using Guardian Gaze

In this guide, we'll show you how to scan WordPress for malware using the free Guardian Gaze plugin and explain…

gazeblogadmin · July 2026
Blog / 16 min read

How to Do a WordPress Security Audit (Step-by-Step for Site Owners)

Learn how to perform a complete WordPress security audit with this step-by-step guide. Check for vulnerabilities and keep your WordPress…

gazeblogadmin · June 2026
Blog / 13 min read

Abandoned & Nulled WordPress Plugins: A Critical Security Risk

Two of the most common entry points for WordPress compromises aren’t exotic zero-days or sophisticated attacks. They’re plugins that stopped…

gazeblogadmin · June 2026
Blog / 19 min read

WordPress Brute Force Attack Prevention: The Complete 2026 Guide

A WordPress brute force attack is an automated attempt to log into your site by guessing username and password combinations…

gazeblogadmin · May 2026
Blog / 17 min read

How to Fix the “This Site May Be Hacked” Warning in Google Search Results (2026)

If Google is showing “This site may be hacked” under your search result, Google has detected spam, malware, or unauthorized…

gazeblogadmin · May 2026
Blog / 17 min read

WordPress Japanese SEO Spam Hack: Detection, Removal & Prevention (2026)

The Japanese SEO spam hack (also called the Japanese keyword hack) injects thousands of auto-generated Japanese-language pages into your WordPress…

gazeblogadmin · May 2026
Blog / 18 min read

WordPress Redirect Hack: Detect & Remove It (2026 Guide)

A WordPress redirect hack sends your visitors to scam sites, fake pharmacies, sketchy ad networks, or malware downloads, usually only…

gazeblogadmin · May 2026
Blog / 18 min read

WordPress Pharma Hack: Detection, Removal & Prevention (2026 Guide)

The WordPress pharma hack is a black-hat SEO infection that injects pharmaceutical spam (Viagra, Cialis, Tramadol, Phentermine) into your site,…

gazeblogadmin · April 2026
Blog / 11 min read

Website Hacked? 17 Signs Your WordPress Site Is Compromised

Discovering your WordPress hacked is one of the most stressful moments for any business owner, developer, or agency. Traffic drops…

gazeblogadmin · February 2026

Get new posts in your inbox.

One email per post. Threat walkthroughs, agency playbooks, and product updates. Unsubscribe anytime.

Subscribe →