SECURITY FINDING
WordPress login page at the default address
What it is
The login page sits at the default address (/wp-login.php or /wp-admin) — the very first URL every automated attack bot tries against every WordPress site on the internet.
How to fix it
Move the login page to a custom, secret address. If you're not sure how, install the WordPress Plugin: it can hide the login natively, without relying on a third-party plugin.
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.