Additional steps to secure your WordPress site.
Prevent any files that are in the /wp-content/uploads directory from being executed as PHP files.
kubectl cp config-files/no-php-exec.htaccess your-pod-name:/var/www/html/wp-content/uploads/.htaccess
See The Best WordPress Security Plugins and Services (Both Free and Premium) 2019 and WP Security Compared
- Block Bad Queries (BBQ) - Free
- Simple, super-fast plugin that protects your site against malicious URL requests.
- iThemes Security - Freemium
- #1 WordPress Security Plugin
- All in One WP Security & Firewall - Free
- It reduces security risk by checking for vulnerabilities, and by implementing and enforcing the latest recommended WordPress security practices and techniques.