Last reviewed: 2026-04-21
- MFA: Multi-factor authentication. A second login step beyond the password.
- WAF: Web Application Firewall. A service or layer that filters malicious traffic before it reaches the site.
- XML-RPC: A WordPress interface used by some tools and integrations. It can also be abused if left exposed without need.
- Staging: A separate copy of the site used for testing changes before production.
- Production: The live site visitors use.
- Least privilege: Giving users and systems only the access they actually need.
- File permissions: Rules that control who can read, write, or execute files.
- Credential stuffing: Attackers trying passwords leaked from other sites.
- Rollback: Reverting to a known working version after a failed change.
- Restore test: Recovering a site from backup in a safe environment to prove the backup works.
If a guide uses a term you do not recognize, check here first and then return to the main task.