Someone found a vulnerability in one of your plugins. The panic is reasonable and the fix is usually smaller than it feels - but only if you know what is actually exposed.I harden one WordPress site with hands, not a plugin: admin and login access locked down, unused accounts removed, file permissions corrected, database exposed to PHP blocked, vulnerable or abandoned plugins dealt with, and login attempts limited so the obvious bots stop working. You get a written before-and-after of every change.I will also tell you honestly whether a problem I find is something I can fix cleanly or something that needs a rebuild conversation. No scare tactics to sell you a bigger job.Hardening is a one-time job. Keeping on top of updates afterwards is the monthly care plan, and honestly a better use of money than more plugins.
