This article outlines the main security concerns when working with WordPress:
- Random attacks through web addresses in an attempt to break in to your website
- Index pages that display a bunch of files (like images)
- Attacks at your server through WordPress
- Insecure data or errors that can lead to security loopholes
The article is great for developers as it outlines the main measures you can take to secure your WordPress site.
It really hit home for be in September of 2011 when the big Timthumb attack hit some of my websites. Securing your WordPress site is really important! I lost days of sleep trying to fix all the problems that one attack created for me.
Read the article: Securing Your WordPress Website at Smashing Magazine.