Common Hack Attack Types Explained:
EXPLOIT – (92% of direct hack attacks) – a badly written plugin/theme enable a hacker to execute a command/script that gives them control of your website…
FACT – popular security plugins and services DO NOT offer any protection against this.
BRUTE FORCE ATTACK – (8% of direct hack attack) – Multiple attempts to guess your username/password and take control of your website
FACT – most popular security plugins and services are good at blocking this attack… but can not deal with new amplified XMLRPC attacks.
DDOS – (“break the site” hack attack) – this is an attempt to flood your website with requests so your server falls over
FACT – Plugins CAN NOT deal with this attack – you would need to use a third party service like Cloudflare or bespoke hardware protection
WP Site Guardian Review