If your website uses Woocommerce, you need to make sure you have the latest version installed. On July 13, 2021 they announced a security patch – and it’s essential you apply it immediatly.
Yes. You absolutely NEED an SSL certificate installed on your website. Most hosting accounts will include SSL with you plan, but if not, you can get a free one (although you’ll have to regularly renew it manually). Improve Search rankings, increase customer trust and prevent basic hacks.