Site Isolation for WordPress: How to Stop One Compromised Site From Bringing Down the Rest

https://wiki-zine.win/index.php/When_a_Boutique_Store%27s_Site_Was_Hit_and_the_WAF_Stopped_the_Attack:_Leo%27s_Story

I learned the hard way at 3am: a single outdated plugin on a low-traffic client site can turn into a midnight epidemic when the server is configured poorly