A small business website can still be a useful target for automated attacks. Most WordPress compromises are not personal; they come from bots looking for weak passwords, outdated plugins, exposed forms and poor hosting configuration. A practical WordPress security checklist…