WPlura WordPress Security Checklist - 2026-09 - Run a public SiteCheck before launch or handoff. - Review administrator accounts and remove unexpected users. - Check for exposed debug logs, public archives, and executable uploads. - Confirm backups and restore steps before risky changes. - Document incident contacts and escalation steps.