With over 60% market share and thousands of plugins, WordPress sites have become convenient targets for hackers. Healthcare data is particularly lucrative when sold or held for ransom; since off-the-shelf WordPress is not HIPAA compliant, all unprotected sites are at risk. An up-to-date WordPress installation – including all plugins and themes – is critical for protecting against the ever-evolving arsenal of WordPress attacks.