[rhd]

And SOC/CSIRT folks. A staggering amount of incidents involve an external wordpress install used as free real estate by threat actors in some way (e.g. phishing kit, malware infra).