HackRepair.com Website Security Services

10/22/2026

Major update completed for my WordPress Archiver plugin! Check it out...

Plugins you switch off but never delete pile up, and one day somebody clicks Activate on the one that broke the site, or the one that was hacked.. Well, you get the idea...

Trivia?
Yes, I've been maintaining this plugin for over 11 years.
What were you doing 11 years ago? ;_)

10/21/2026

A quick update on my PHP 7.4-to-PHP 8.3 upgrade service. See comment.

10/19/2026

A cautionary tale...
See link in comments.

10/17/2026

I rarely share other people's videos-- the importance of this... Well, this is a very real thing.

Vercel & Context AI Hack?
https://www.facebook.com/reel/1443599774445705

10/15/2026

How to Set Up a Quick Fix Link for 100 Sites (Browser Site Search)

10/13/2026

Your WordPress site just broke. Which plugin did it?

You hit “Update,” your admin bar turned into a train wreck, and now your site is throwing a 404. We’ve all been there.

In this video, I show THRG Plugin Detective at work. It’s a free-to-use WordPress plugin for our paid customers that I built to track down the culprit in a few clicks, even when wp-admin is locked out.

___*Your WordPress site just broke. Which plugin did it?*You hit...

10/12/2026

Bricksforge WordPress Hack: Hackers Don’t Even Need Your Password...

If your WordPress website uses Bricksforge, take a few minutes to check it today. A critical security flaw is being exploited by attackers, and a fix is available.

Bricksforge security flaw under active attack. Update your WordPress plugin now and learn why patching alone may not remove an existing hack.

10/06/2026

⚠️ WordPress 7.1.3 Security Update Released

WordPress 7.1.3 is now available and fixes 7 security vulnerabilities in WordPress Core, along with 4 additional bugs.

The most important fixes include:

🔹 Stored XSS through pending comments
Malicious code could potentially run when an administrator opens the Comments moderation screen.

🔹 SQL injection in the WordPress export system
Malicious input could remain hidden until someone runs a WordPress export.

🔹 Private comments exposed
Comments on private or unpublished posts could potentially be viewed by visitors who were not logged in.

🔹 Additional fixes
WordPress also patched an Imgur embed XSS issue, a denial-of-service bug, and several permissions-related vulnerabilities.

Interestingly, Anthropic reported 3 of the 7 vulnerabilities, with others reported by Trail of Bits, Patchstack, independent researchers, and the WordPress security team.

There are currently no known reports of these 7.1.3 vulnerabilities being actively exploited.

Still, I recommend updating sooner rather than later.

✅ Update WordPress Core to 7.1.3
✅ Confirm your backups are current
✅ Check older WordPress installations carefully, since some security fixes are still being backported

If automatic Core updates are enabled, your site may already be updated. See:
Dashboard → Updates

Stay patched!

10/04/2026

Stop letting bots hammer your WordPress logins. Let's lock down your traffic at the edge

___
Hey everyone, Jim Walker here. Some of you might know me as The Hack Repair Guy. I’ve been running servers and cleaning up compromised WordPress environments out of San Diego for a couple of decades now.

If there is one thing I see constantly, it is malicious bots chewing up server resources trying to brute-force their way in. It slows everything down and puts your data at risk.

To tackle this proactively, I’ve officially rolled out a new service offering over at HackGuard: Cloudflare WAF, Speed Optimization & Security Setup. Oh, and it's cheap!!

Instead of waiting for an attack to hit your host, we stop it at the edge. Here is what I handle for you:

Cloudflare WAF Configuration: Custom firewall rules to instantly drop bad actors and automated scrapers.

WordPress Login Lockdown: Strict expression filtering for /wp-admin/, /wp-login.php, and /xmlrpc.php so bots can't even load your login screens.

Country-Based Traffic Filters: Geo-isolation rules designed to block traffic from regions you don't do business with, stopping the vast majority of automated attacks dead in their tracks.

Speed Optimization: Because keeping out the junk traffic naturally speeds up your site for real visitors.

When you work with me, you aren't getting tossed into a faceless agency ticketing system. You get a real server admin picking up the phone and setting things up correctly the first time.

If your WordPress site matters and you want to get your security foundation right, just ask. I'm here to help.

Let me know if you have any questions about WAF rules or locking down your setup in the comments—always happy to talk shop!

09/22/2026

Regarding this past month's issues with WordPress.

There have been a number of near-zero-day exploits affecting WordPress over the past month, as hackers use AI to accelerate their discovery of vulnerabilities in WordPress and plugins.

Be sure to keep a close eye on your updates this month.
It's not over yet.
https://wordpress.org/news/2026/09/wordpress-7-1-2-release/

While I don't mind the extra business from fixing the recent surge in hacked WordPress installations, this situation has gotten a bit out of control...

This security release features a fix for a critical severity security vulnerability. Because this is a security release, it is recommended that you update your sites immediately. You can download W…