Author

Paul G.

Paul Goodchild is the founder and CEO of Shield Security for WordPress – a best-in-class security plugin for the protection of critical WordPress-based websites and businesses.

Paul focuses on security features that deliver realworld results for client through the prevention of security breaches before they can happen. Prevention is preferrable over busy-security-work that sees you putting out fires and cleaning up your sites after an infection has taken hold.

Paul maintains that while a security plugin for WordPress is absolutely crucial, “security” is a practice and must involve your entire website and WordPress hosting environment, including your own local device security and security hygiene.

Paul Goodchild Profile Picture

Latest blogs from Paul

ShieldNOTES
April 13, 2026 by Paul G.

Smart Slider 3 Backdoor Sparks Critical WordPress Vulnerabilities

Critical WordPress vulnerabilities grow with Smart Slider 3 and Blocksy Companion flaws, plus updates on secure outsourcing and a new AI CMS.

Continue Reading →
ShieldPRO WordPress WAF Feature Graphic
April 13, 2026 by Paul G.

WordPress WAF Performance vs Protection Explained

WordPress has no built-in WAF. Learn which firewall architecture fits your site profile and how to configure protection without breaking checkouts or logins.

Continue Reading →
ShieldPRO Outsourcing WordPress Support Feature Graphic
April 9, 2026 by Paul G.

Outsource WordPress Support Without Losing Control

Learn how to outsource WordPress support without losing control. Covers model fit, briefs, pricing, security, and partner vetting for agencies and site owners.

Continue Reading →
ShieldNOTES
April 7, 2026 by Paul G.

WordPress Plugin Risks Continue;& Fake CAPTCHA Malware Alert

New security risks hit popular WordPress plugins, including a critical flaw. While fake CAPTCHA malware spreads. learn what truly keeps sites safe.

Continue Reading →
ShieldNOTES
March 30, 2026 by Paul G.

ThemeREX Addons & Other Critical Flaws Hit WordPress Plugins

WordPress threats report this week includes repeated plugin flaws, a top ThemeREX Addons vulnerability and is exploring the true cost of securing sites.

Continue Reading →
ShieldNOTES
March 23, 2026 by Paul G.

Top Plugin Risks, My WordPress in Your Browser;& SQL Injection Checks

Plugins powering millions of sites with hidden vulnerabilities, the new WordPress in your browser release, and our latest SQL injection testing playbook.

Continue Reading →
Shield Security PRO Test WordPress SQL Injection Feature Graphic
March 20, 2026 by Paul G.

How to Test WordPress for SQL Injection Vulnerabilities

Learn how SQL injection targets WordPress plugins and themes, how to test your site for vulnerabilities, and what to do if an attack leaves its mark.

Continue Reading →
Shield Security PRO Wordfence Free vs Malcare Featured Image
March 18, 2026 by Paul G.

Free Wordfence vs Free MalCare: The True Cost of WordPress Security

Compare Wordfence Free and MalCare Free on real cleanup capability, server performance, and what each plan actually costs when your site gets compromised.

Continue Reading →
ShieldNOTES
March 16, 2026 by Paul G.

WordPress Security Patch, Recurring Plugin Risks & Early Threat Monitoring

WordPress has a new security patch, and major plugin vulnerabilities persist, including unpatched MetForm Pro. Plus, see how to use custom security alerts.

Continue Reading →
ShieldNOTES
March 9, 2026 by Paul G.

Serious Widget Options and Other WordPress Gaps Expose Millions

Several plugin vulnerabilities surfaced this week, including Widget Options with a critical flaw still awaiting a fix—another reason to harden WordPress.

Continue Reading →
Click to access the login or register cheese