User Roles and Least Privilege in WordPress
Most WordPress breaches spread further than they should because too many accounts have Administrator access. Here is how to map people to the right built-in roles and audit stale accounts before someone else finds them.