Vet and Update Themes
Since you’re updating and vetting your plugins, don’t forget to do it for your themes too. There is a misconception that a theme is not capable of having malicious or poorly written code. I think novice users equate themes to markup files, which simply set the design of your website.
The truth about themes and plugins is that they are in a sense interchangeable. There are reasons you want to extend WordPress core functionality with a plugin, but it’s actually possible to write the same code in your theme. Themes have a functions.php file, which allow you to write or include the same exact code you can write into plugins.
This means it is absolutely just as vital that you run the same checks against theme choices and that ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access