via pluginvulnerabilities.com => original post link
We recently noted that a post that ranks highly when searching Google for the best WordPress security plugins in 2024 is saying that Sucuri Security is the best. It is pretty common to see that listed as the best. The reason it is listed as the best has nothing to do with the plugin. Instead, it is listed first because Sucuri pays out affiliate revenue for an unrelated service. These posts conflate the plugin and the service, because they are trying to hide an ad for the service in an unrelated post, which makes it sound like the plugin provides protection it doesn’t.
The plugin itself doesn’t contain a firewall and won’t protect your website from being hacked through vulnerabilities in other plugins. This is confirmed by extensive testing we have done. The protection offered by their service doesn’t seem much better when Sucuri keep admitting their customers are getting hacked. While admitting that it failed to protect them, they claim their service will protect websites. That doesn’t seem to make sense. It seems to make even less sense when you consider that they are also admitting they don’t even know how the hacks happened. [Read more]