WordPress Security Incidents Widespread, Recovery Plans Rare Among Professionals A recent survey by Melapress, a developer of WordPress security plugins, reveals that most WordPress professionals including agency staff, developers, designers, and site administrators have encountered at least one known security incident. The survey, which polled 319 professionals, found that fewer than 30% had a formal breach recovery plan in place, leaving critical decisions about response, backups, and notifications to be made during an active incident. Downtime was the most common consequence, reported by 68.4% of affected respondents. Many incidents were discovered only after the site exhibited unusual behavior, often flagged by visitors, customers, or colleagues rather than proactive monitoring. Among detection methods, logging tools were the most effective, followed by hosting provider alerts and malware scanners. Delayed discovery correlated with greater damage. Incidents uncovered via search engine warnings (e.g., Google Search Console) were far more likely to result in lost search rankings (46%) compared to those detected through other means (14.5%). One e-commerce site owner reported permanent ranking declines after a hack, with traffic never fully recovering. Researchers emphasize the need for prepared recovery plans, including defined roles for isolating systems, restoring backups, and notifying stakeholders. They also highlight the importance of testing backups unverified backups may fail when needed and training for content editors and administrators, whose actions can impact security. Even when security is outsourced to agencies or freelancers, site owners should know who receives security alerts to ensure timely responses.