Aller au contenu principal
MeteorGPLby WebbingApps
W

Wordfence Security

Extension
Suivre 0 Ajouter une étoile 0
Installer

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

  • 0 étoile
  • 0 personne le suit
  • 0 téléchargement
  • Licence non déclarée

Versions 0

Les plus récentes d’abord · chaque version analysée avant publication
Afficher 150 versions pas encore disponibles

Publications citées dans le journal des modifications de l’éditeur ou sur WordPress.org que le dépôt ne contient pas encore.

  1. 9.0.2 Pas encore disponible

    Change: Changed IPv6 diagnostics result to be informational only

    Entrée du journal des modifications

  2. 9.0.1 Pas encore disponible

    Improvement: UX enhancements for passkey authentication and general login security

    Entrée du journal des modifications

  3. 9.0.0 Pas encore disponible

    Improvement: Added support for passkey authentication

    Entrée du journal des modifications

  4. 8.2.2 Pas encore disponible

    Improvement: Better presentation of Live Traffic data on wide screens

    Entrée du journal des modifications

  5. 8.2.1 Pas encore disponible

    Fix: Fixed issue with some i18n plugins/themes when a user has no 2FA recovery codes

    Entrée du journal des modifications

  6. 8.2.0 Pas encore disponible

    Improvement: Migrated all deprecated JavaScript libraries in use to a Vue-based infrastructure

    Entrée du journal des modifications

  7. 8.1.4 Pas encore disponible

    Fix: Fixed an issue with inetpton introduced by a recent patch to PHP 8.1+ that could cause a fatal error if a malformed IP address was pass...

    Entrée du journal des modifications

  8. 8.1.3 Pas encore disponible

    Improvement: Updated the bundled geoip database

    Entrée du journal des modifications

  9. 8.1.2 Pas encore disponible

    Improvement: Updated the bundled geoip database

    Entrée du journal des modifications

  10. 8.1.1 Pas encore disponible

    Improvement: Improved localization support for the various block screens and messages

    Entrée du journal des modifications

  11. 8.1.0 Pas encore disponible

    Improvement: Added password scanning support for WordPress 6.8 and later

    Entrée du journal des modifications

  12. 8.0.5 Pas encore disponible

    Fix: Compatibility fixes for WordPress 6.8

    Entrée du journal des modifications

  13. 8.0.4 Pas encore disponible

    Improvement: Improved error handling and messaging for some responses from our servers

    Entrée du journal des modifications

  14. 8.0.3 Pas encore disponible

    Improvement: Added support for hosts relocating the WAF's auto-prepend file via the constant/envvar WORDFENCEWAFPREPENDDIRECTORY

    Entrée du journal des modifications

  15. 8.0.2 Pas encore disponible

    Improvement: General compatibility improvements and better error handling for PHP 8+

    Entrée du journal des modifications

  16. 8.0.1 Pas encore disponible

    Improvement: Updated GeoIP database

    Entrée du journal des modifications

  17. 8.0.0 Pas encore disponible

    Improvement: Introduced the Wordfence Audit Log, a new premium feature to monitor all changes and actions in security-sensitive areas of the...

    Entrée du journal des modifications

  18. 7.11.7 Pas encore disponible

    Improvement: Optimized scan performance by reducing database queries by approximately 38% along with CPU usage

    Entrée du journal des modifications

  19. 7.11.6 Pas encore disponible

    Improvement: Revised the strong password requirements notice to be more readable

    Entrée du journal des modifications

  20. 7.11.5 Pas encore disponible

    Fix: Revised the behavior of the reCAPTCHA verification to use the documented expiration period of the token and response to avoid sending v...

    Entrée du journal des modifications

  21. 7.11.4 Pas encore disponible

    Change: CAPTCHA verification when enabled now additionally applies to 2FA logins (may send an email verification on low scores) and no longe...

    Entrée du journal des modifications

  22. 7.11.3 Pas encore disponible

    Fix: Fixed an issue with sites containing invalid Wordfence Central site data where they could throw an error when viewing Wordfence pages

    Entrée du journal des modifications

  23. 7.11.2 Pas encore disponible

    Improvement: Enhanced the vulnerability scan to check and alert for WordPress core vulnerabilities and to adjust the severity of the scan re...

    Entrée du journal des modifications

  24. 7.11.1 Pas encore disponible

    Improvement: Added ".env" to the files checked for "Scan for publicly accessible configuration, backup, or log files"

    Entrée du journal des modifications

  25. 7.11.0 Pas encore disponible

    Improvement: Added new functionality for trusted proxy presets to support proxies such as Amazon CloudFront, Ezoic, and Quic.cloud

    Entrée du journal des modifications

  26. 7.10.7 Pas encore disponible

    Fix: Compatibility fix for WordPress 6.4 on the login page styling

    Entrée du journal des modifications

  27. 7.10.6 Pas encore disponible

    Fix: Addressed an issue with multisite installations when the wpoptions tables had different encodings/collations

    Entrée du journal des modifications

  28. 7.10.5 Pas encore disponible

    Improvement: Updated the bundled GeoIP database

    Entrée du journal des modifications

  29. 7.10.4 Pas encore disponible

    Improvement: "Admin created outside of WordPress" scan results may now be reviewed and approved

    Entrée du journal des modifications

  30. 7.10.3 Pas encore disponible

    Improvement: Updated GeoIP database

    Entrée du journal des modifications

  31. 7.10.2 Pas encore disponible

    Fix: Prevented bundled sodiumcompat library from conflicting with versions included with older WordPress versions

    Entrée du journal des modifications

  32. 7.10.1 Pas encore disponible

    Improvement: Added support for processing arrays of files in the WAF

    Entrée du journal des modifications

  33. 7.10.0 Pas encore disponible

    Improvement: Added translation support for strings from login security plugin

    Entrée du journal des modifications

  34. 7.9.3 Pas encore disponible

    Improvement: Added exception handling to prevent WAF errors from being fatal

    Entrée du journal des modifications

  35. 7.9.2 Pas encore disponible

    Improvement: The vulnerability severity score (CVSS) is now shown with any vulnerability findings from the scanner

    Entrée du journal des modifications

  36. 7.9.1 Pas encore disponible

    Improvement: Further improved performance when viewing 2FA settings and hid user counts by default on sites with many users

    Entrée du journal des modifications

  37. 7.9.0 Pas encore disponible

    Improvement: Added 2FA management shortcode and WooCommerce account integration

    Entrée du journal des modifications

  38. 7.8.2 Pas encore disponible

    Fix: Releasing same changes as 7.8.1, due to wordpress.org error

    Entrée du journal des modifications

  39. 7.8.1 Pas encore disponible

    Improvement: Added more granualar data deletion options to deactivation prompt

    Entrée du journal des modifications

  40. 7.8.0 Pas encore disponible

    Improvement: Added feedback when login form is submitted with 2FA

    Entrée du journal des modifications

  41. 7.7.1 Pas encore disponible

    Fix: Prevented scan resume attempts from repeating indefinitely when the initial scan stage fails

    Entrée du journal des modifications

  42. 7.7.0 Pas encore disponible

    Improvement: Added configurable scan resume functionality to prevent scan failures on sites with intermittent connectivity issues

    Entrée du journal des modifications

  43. 7.6.2 Pas encore disponible

    Improvement: Hardened 2FA login flow to reduce exposure in cases where an attacker is able to obtain privileged information from the databas...

    Entrée du journal des modifications

  44. 7.6.1 Pas encore disponible

    Fix: Prevented XSS that would have required admin privileges to exploit (CVE-2022-3144)

    Entrée du journal des modifications

  45. 7.6.0 Pas encore disponible

    Improvement: Added option to start scans using only IPv4

    Entrée du journal des modifications

  46. 7.5.11 Pas encore disponible

    Improvement: Added option to toggle display of last login column on WP Users page

    Entrée du journal des modifications

  47. 7.5.10 Pas encore disponible

    Improvement: Improved scan support for sites with non-standard directory structures

    Entrée du journal des modifications

  48. 7.5.9 Pas encore disponible

    Improvement: Updated GeoIP database

    Entrée du journal des modifications

  49. 7.5.8 Pas encore disponible

    Launch of Wordfence Care and Wordfence Response

    Entrée du journal des modifications

  50. 7.5.7 Pas encore disponible

    Improvement: Made preliminary changes for compatibility with PHP 8.1

    Entrée du journal des modifications

  51. 7.5.6 Pas encore disponible

    Fix: Prevented login errors with WooCommerce integration when manual username entry is enabled on the WooCommerce registration form

    Entrée du journal des modifications

  52. 7.5.5 Pas encore disponible

    Improvement: Enhanced accessibility

    Entrée du journal des modifications

  53. 7.5.4 Pas encore disponible

    Fix: Resolve conflict with woocommerce-gateway-amazon-payments-advanced plugin

    Entrée du journal des modifications

  54. 7.5.3 Pas encore disponible

    Improvement: Expanded WAF capabilities including better JSON and user permission handling

    Entrée du journal des modifications

  55. 7.5.2 Pas encore disponible

    Fix: Fixed fatal error on single-sites running WordPress

    Entrée du journal des modifications

  56. 7.5.1 Pas encore disponible

    Fix: Fixed fatal error when viewing the Login Security settings page from an allowlisted IP.

    Entrée du journal des modifications

  57. 7.5.0 Pas encore disponible

    Improvement: Translation-readiness: All user-facing strings are now run through WordPress's i18n functions.

    Entrée du journal des modifications

  58. 7.4.14 Pas encore disponible

    Improvement: Added option to disable application passwords.

    Entrée du journal des modifications

  59. 7.4.12 Pas encore disponible

    Improvement: Initial integration of i18n in Wordfence.

    Entrée du journal des modifications

  60. 7.4.11 Pas encore disponible

    Improvement: Added diagnostic debug button to clear Wordfence Central connection data from the database.

    Entrée du journal des modifications

  61. 7.4.10 Pas encore disponible

    Improvement: Prevent author sitemap from leaking usernames in WordPress >= 5.5.0.

    Entrée du journal des modifications

  62. 7.4.9 Pas encore disponible

    Improvement: Added list of known malicious usernames to suspicious administrator scan.

    Entrée du journal des modifications

  63. 7.4.8 Pas encore disponible

    Fix: Fixed issue with fatal errors encountered during activation under certain conditions.

    Entrée du journal des modifications

  64. 7.4.7 Pas encore disponible

    Improvement: Updated bundled GeoIP database.

    Entrée du journal des modifications

  65. 7.4.6 Pas encore disponible

    Improvement: Enhanced the detection ability of the WAF for SQLi attacks.

    Entrée du journal des modifications

  66. 7.4.5 Pas encore disponible

    Improvement: Improved WAF coverage for an Infinite WP authentication bypass vulnerability.

    Entrée du journal des modifications

  67. 7.4.4 Pas encore disponible

    Fix: Fixed a UI issue where the scan summary status marker for malware didn't always match the findings.

    Entrée du journal des modifications

  68. 7.4.3 Pas encore disponible

    Improvement: Added WAF coverage for an Infinite WP authentication bypass vulnerability.

    Entrée du journal des modifications

  69. 7.4.2 Pas encore disponible

    Improvement: Increased performance of IP CIDR range comparisons.

    Entrée du journal des modifications

  70. 7.4.1 Pas encore disponible

    Improvement: Updated the bundled GeoIP database.

    Entrée du journal des modifications

  71. 7.4.0 Pas encore disponible

    Improvement: Added a MySQL-based configuration and data storage for the WAF to expand the number of hosting environments supported. For more...

    Entrée du journal des modifications

  72. 7.3.6 Pas encore disponible

    Improvement: Multiple "php.ini file in core directory" issues are now consolidated into a single issue for clearer scan results.

    Entrée du journal des modifications

  73. 7.3.5 Pas encore disponible

    Improvement: Improved tagging of the login endpoint for brute force protection.

    Entrée du journal des modifications

  74. 7.3.4 Pas encore disponible

    Improvement: Added security events and alerting features built into Wordfence Central.

    Entrée du journal des modifications

  75. 7.3.3 Pas encore disponible

    Improvement: Added support for managing the login security settings to Wordfence Central.

    Entrée du journal des modifications

  76. 7.3.2 Pas encore disponible

    Improvement: Updated sodiumcompat to address an incompatibility that may occur with the pending WordPress 5.2.1 update.

    Entrée du journal des modifications

  77. 7.3.1 Pas encore disponible

    Improvement: Two-factor authentication is new and improved, now available on all Premium and Free installations.

    Entrée du journal des modifications

  78. 7.2.5 Pas encore disponible

    Improvement: Added additional data breach records to the breached password check.

    Entrée du journal des modifications

  79. 7.2.4 Pas encore disponible

    Improvement: Updated vulnerability database integration.

    Entrée du journal des modifications

  80. 7.2.3 Pas encore disponible

    Improvement: Country names are now shown instead of two letter codes where appropriate.

    Entrée du journal des modifications

  81. 7.2.2 Pas encore disponible

    Improvement: Updated GeoIP database.

    Entrée du journal des modifications

  82. 7.2.1 Pas encore disponible

    Improvement: Integrated Wordfence with Wordfence Central, a new service allowing you to manage multiple Wordfence installations from a singl...

    Entrée du journal des modifications

  83. 7.1.20 Pas encore disponible

    Fix: Fixed a commit error with 7.1.19

    Entrée du journal des modifications

  84. 7.1.19 Pas encore disponible

    Improvement: Speed optimizations for WAF rule compilation.

    Entrée du journal des modifications

  85. 7.1.18 Pas encore disponible

    Improvement: Removed unused font glyph ranges to reduce file count and size.

    Entrée du journal des modifications

  86. 7.1.17 Pas encore disponible

    Improvement: Increased frequency of filesystem permission check and update of the WAF config files.

    Entrée du journal des modifications

  87. 7.1.16 Pas encore disponible

    Improvement: Service allowlisting can now be selectively toggled on or off per service.

    Entrée du journal des modifications

  88. 7.1.15 Pas encore disponible

    Fix: Addressed a plugin conflict with the composer autoloader.

    Entrée du journal des modifications

  89. 7.1.14 Pas encore disponible

    Improvement: Reduced queries and potential table size for rate limiting-related data.

    Entrée du journal des modifications

  90. 7.1.12 Pas encore disponible

    Improvement: Updated bundled GeoIP database.

    Entrée du journal des modifications

  91. 7.1.11 Pas encore disponible

    Improvement: Added a custom message field that will show on all block pages.

    Entrée du journal des modifications

  92. 7.1.10 Pas encore disponible

    Improvement: Better labeling in Live Traffic for 301 and 302 redirects.

    Entrée du journal des modifications

  93. 7.1.9 Pas encore disponible

    Improvement: Added an "unsubscribe" link to plugin-generated alerts.

    Entrée du journal des modifications

  94. 7.1.8 Pas encore disponible

    Improvement: Better detection of removal status when uninstalling the WAF's auto-prepend file.

    Entrée du journal des modifications

  95. 7.1.7 Pas encore disponible

    Improvement: Added better support for keyboard navigation of options.

    Entrée du journal des modifications

  96. 7.1.6 Pas encore disponible

    Fix: Added a workaround for sites with inaccessible WAF config files when reading php://input

    Entrée du journal des modifications

  97. 7.1.5 Pas encore disponible

    Improvement: GDPR compliance updates.

    Entrée du journal des modifications

  98. 7.1.4 Pas encore disponible

    Improvement: Added additional XSS detection capabilities.

    Entrée du journal des modifications

  99. 7.1.3 Pas encore disponible

    Improvement: Improved the performance of our config table status check.

    Entrée du journal des modifications

  100. 7.1.2 Pas encore disponible

    Improvement: Added support for filtering the blocks list.

    Entrée du journal des modifications

Les 150 publications pas encore disponibles, dans le journal des modifications

Lisez-moi

Licence

Wordfence Security

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

https://www.youtube.com/watch?v=i4ZN2TwlaBE

THE MOST POPULAR WORDPRESS FIREWALL & SECURITY SCANNER

WordPress security requires a team of dedicated analysts researching the latest malware variants and WordPress exploits, turning them into firewall rules and malware signatures, and releasing those to customers in real-time.

Choose the right protection for you: Wordfence Free, Premium, Care or Response

Wordfence is widely acknowledged as the number one WordPress security research team in the World. Our plugin provides a comprehensive suite of security features, and our team’s research is what powers our plugin and provides the level of security that we are known for.

At Wordfence, WordPress security isn’t a division of our business – WordPress security is all we do. We employ a global 24-hour dedicated incident response team that provides our priority customers with a 1 hour response time for any security incident.

The sun never sets on our global security team and we run a sophisticated threat intelligence platform to aggregate, analyze and produce ground breaking security research on the newest security threats.

Wordfence Security includes an endpoint firewall, malware scanner, robust login security features, live traffic views, and more. Our Threat Defense Feed arms Wordfence with the newest firewall rules, malware signatures, and malicious IP addresses it needs to keep your website safe.

Rounded out by passkeys, 2FA, and a suite of additional features, Wordfence is the most comprehensive WordPress security solution available.

🔥 WORDPRESS FIREWALL

  • Web Application Firewall identifies and blocks malicious traffic. Built and maintained by a large team focused 100% on WordPress security.
  • Real-time firewall rule and malware signature [Premium] updates via the Threat Defense Feed (free version is delayed by 30 days).
  • Real-time IP Blocklist [Premium] blocks all requests from the most malicious IPs, protecting your site while reducing load.
  • Protects your site at the endpoint, enabling deep integration with WordPress. Unlike cloud alternatives, it does not break encryption, cannot be bypassed and cannot leak data.
  • Integrated malware scanner blocks requests that include malicious code or content.
  • Protection from brute force attacks by limiting login attempts.

📡 WORDPRESS SECURITY SCANNER

  • Malware scanner checks core files, themes and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections.
  • Real-time malware signature updates [Premium] via the Threat Defense Feed (free version is delayed by 30 days).
  • Compares with WordPress.org repository your core files, themes and plugins, checking their integrity and reporting any changes to you.
  • Repair WordPress core, theme, and plugin files that have changed by overwriting them with a pristine, original version. Delete any files that don’t belong easily within the Wordfence interface.
  • Malware Removal Tools "Delete File" and "Delete All Deletable Files" options allow for efficient malware removal. Remember to investigate the scan results and backup files first!
  • Checks your site for known security vulnerabilities and alerts you to any issues. Also alerts you to potential security issues when a plugin has been closed or abandoned.
  • Checks your content safety by scanning file contents, posts and comments for dangerous URLs and suspicious content.
  • Checks to see if your site or IP have been blocklisted [Premium] for malicious activity, generating spam or other security issues.

🔒 LOGIN SECURITY

  • Passkeys let users sign in with touch, facial recognition, a device password, or a PIN as a simple and secure alternative to a password and two-factor credentials.
  • Two-factor authentication (2FA), one of the most secure forms of remote system authentication available via any TOTP-based authenticator app or service.
  • Login Page CAPTCHA stops bots from logging in.
  • Passkey and 2FA management for WooCommerce and custom integrations allows users to manage credentials on custom account pages.
  • XML-RPC options including disabling or adding 2FA.
  • Password Security: Block logins for administrators using known compromised passwords.

📋 SECURITY AUDIT LOG [Premium]

  • The Audit Log monitors all changes and actions in security-sensitive areas of the site.
  • Remote tamper-proof data storage via Wordfence Central.
  • Monitor events and actions ranging from user creation and editing to plugin/theme installation and updates to post and page changes.
  • Configurable to log all events or significant events only, which includes all authentication, site configuration, and site functionality events.

🌐 WORDFENCE CENTRAL

  • Wordfence Central is a powerful and efficient way to manage the security for multiple sites in one place.
  • Centralized management: Efficiently assess the security status of all your websites in one view. View detailed security findings without leaving Wordfence Central.
  • Powerful templates make configuring Wordfence a breeze.
  • Highly configurable alerts can be delivered via email, SMS or Slack. Improve the signal to noise ratio by leveraging severity level options and a daily digest option.
  • Track and alert on important security events including administrator logins, breached password usage and surges in attack activity.
  • Free to use for unlimited sites.

🛠️ SECURITY TOOLS

  • Live Traffic monitors visits and hack attempts not shown in other analytics packages in real time; including origin, their IP address, the time of day and time spent on your site.
  • Block attackers by IP or build advanced rules based on IP Range, Hostname, User Agent and Referrer.
  • Country blocking available with Wordfence Premium.

Ce qu’il apporte

  • S’intègre avec WooCommerce

Installation

Secure your website using the following steps to install Wordfence:

  1. Install Wordfence automatically or by uploading the ZIP file.
  2. Activate the Wordfence through the 'Plugins' menu in WordPress. Wordfence is now activated.
  3. Go to the scan menu and start your first scan. Scheduled scanning will also be enabled.
  4. Once your first scan has completed, a list of threats will appear. Go through them one by one to secure your site.
  5. Visit the Wordfence options page to enter your email address so that you can receive email security alerts.
  6. Optionally, change your security level or adjust the advanced options to set individual scanning and protection options for your site.
  7. Click the "Live Traffic" menu option to watch your site activity in real-time. Situational awareness is an important part of website security.

To install Wordfence on WordPress Multi-Site installations:

  1. Install Wordfence via the plugin directory or by uploading the ZIP file.
  2. Network Activate Wordfence. This step is important because until you network activate it, your sites will see the plugin option on their plugins menu. Once activated that option disappears.
  3. Now that Wordfence is network activated it will appear on your Network Admin menu. Wordfence will not appear on any individual site's menu.
  4. Go to the "Scan" menu and start your first scan.
  5. Wordfence will do a scan of all files in your WordPress installation including those in the blogs.dir directory of your individual sites.
  6. Live Traffic will appear for ALL sites in your network. If you have a heavily trafficked system you may want to disable live traffic which will stop logging to the DB.
  7. Firewall rules and login rules apply to the WHOLE system. So if you fail a login on site1.example.com and site2.example.com it counts as 2 failures. Crawler traffic is counted between blogs, so if you hit three sites in the network, all the hits are totalled and that counts as the rate you're accessing the system.

Faq

Visit our website to access our official documentation which includes security feature descriptions, common solutions and comprehensive help.

How does Wordfence Security protect sites from attackers?

The WordPress security plugin provides the best protection available for your website. Powered by the constantly updated Threat Defense Feed, Wordfence Firewall stops you from getting hacked. Wordfence Scan leverages the same proprietary feed, alerting you quickly about security issues or if your site is compromised. The Live Traffic view gives you real-time visibility into traffic and hack attempts on your website. A deep set of additional tools round out the most comprehensive WordPress security solution available.

What features does Wordfence Premium enable?

We offer a Premium API key that gives you real-time updates to the Threat Defense Feed which includes a real-time IP blocklist, firewall rules, and malware signatures. Premium support, country blocking, more frequent scans, and spam and spamvertising checks are also included. Click here to sign-up for Wordfence Premium now or simply install Wordfence free and start protecting your website.

How does the Wordfence WordPress Firewall protect websites?

  • Web Application Firewall stops you from getting hacked by identifying malicious traffic, blocking attackers before they can access your website.
  • Threat Defense Feed automatically updates firewall rules that protect you from the latest threats. Premium members receive the real-time version.
  • Block common WordPress security threats like fake Googlebots, malicious scans from hackers and botnets.

What checks does the Wordfence Security Scanner perform?

  • Scans core files, themes and plugins against WordPress.org repository versions to check their integrity. Verify security of your source.
  • See how files have changed. Optionally repair changed files that are security threats.
  • Scans for signatures of over 44,000 known malware variants that are known WordPress security threats.
  • Scans for many known backdoors that create security holes including C99, R57, RootShell, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx and many more.
  • Continuously scans for malware and phishing URL’s including all URLs on the Google Safe Browsing List in all your comments, posts and files that are security threats.
  • Scans for heuristics of backdoors, trojans, suspicious code and other security issues.

What security monitoring features does Wordfence include?

  • See all your traffic in real-time, including robots, humans, 404 errors, logins and logouts and who is consuming most of your content. Enhances your situational awareness of which security threats your site is facing.
  • A real-time view of all traffic including automated bots that often constitute security threats that Javascript analytics packages never show you.
  • Real-time traffic includes reverse DNS and city-level geolocation. Know which geographic area security threats originate from.
  • Monitors disk space which is related to security because many DDoS attacks attempt to consume all disk space to create denial of service.

What login security features are included

  • See all your traffic in real-time, including robots, humans, 404 errors, logins and logouts and who is consuming most of your content. Enhances your situational awareness of which security threats your site is facing.
  • A real-time view of all traffic including automated bots that often constitute security threats that Javascript analytics packages never show you.
  • Real-time traffic includes reverse DNS and city-level geolocation. Know which geographic area security threats originate from.
  • Monitors disk space which is related to security because many DDoS attacks attempt to consume all disk space to create denial of service.

How will I be alerted if my site has a security problem?

Wordfence sends security alerts via email. Once you install Wordfence, you will configure a list of email addresses where security alerts will be sent. When you receive a security alert, make sure you deal with it promptly to ensure your site stays secure.

Do I need a security plugin like Wordfence if I’m using a cloud based firewall (WAF)?

Wordfence provides true endpoint security for your WordPress website. Unlike cloud based firewalls, Wordfence executes within the WordPress environment, giving it knowledge like whether the user is signed in, their identity and what access level they have. Wordfence uses the user’s access level in more than 80% of the firewall rules it uses to protect WordPress websites. Learn more about the Cloud WAF identity problem here. Additionally, cloud based firewalls can be bypassed, leaving your site exposed to attackers. Because Wordfence is an integral part of the endpoint (your WordPress website), it can’t be bypassed. Learn more about the Cloud WAF bypass problem here. To fully protect the investment you’ve made in your website you need to employ a defense in depth approach to security. Wordfence takes this approach.

What blocking features does Wordfence include?

  • Real-time blocking of known attackers. If another site using Wordfence is attacked and blocks the attacker, your site is automatically protected.
  • Block entire malicious networks. Includes advanced IP and Domain WHOIS to report malicious IP’s or networks and block entire networks using the firewall. Report WordPress security threats to network owner.
  • Rate limit or block WordPress security threats like aggressive crawlers, scrapers and bots doing security scans for vulnerabilities in your site.
  • Choose whether you want to block or throttle users and robots who break your WordPress security rules.
  • Premium users can also block countries and schedule scans for specific times and a higher frequency.

What differentiates Wordfence from other WordPress Security plugins?

  • Wordfence Security provides a WordPress Firewall developed specifically for WordPress and blocks attackers looking for vulnerabilities on your site. The Firewall is powered by our Threat Defense Feed which is continually updated as new threats emerge. Premium customers receive updates in real-time.
  • Wordfence verifies your website source code integrity against the official WordPress repository and shows you the changes.
  • Wordfence scans check all your files, comments and posts for URLs in Google's Safe Browsing list. We are the only plugin to offer this very important security enhancement.
  • Wordfence scans do not consume large amounts of your bandwidth because all security scans happen on your web server which makes them very fast.
  • Wordfence fully supports WordPress Multi-Site which means you can security scan every blog in your Multi-Site installation with one click.
  • Wordfence includes passkeys and Two-Factor authentication to help secure WordPress accounts against phishing and brute-force attacks.
  • Wordfence fully supports IPv6 including giving you the ability to look up the location of IPv6 addresses, block IPv6 ranges, detect IPv6 country and do a whois lookup on IPv6 addresses and more.

Will Wordfence slow down my website?

No. Wordfence Security is extremely fast and uses techniques like caching its own configuration data to avoid database lookups and blocking malicious attacks that would slow down your site.

What if my site has already been hacked?

Wordfence Security is able to repair core files, themes and plugins on sites where security is already compromised. You can follow this guide on how to clean a hacked website using Wordfence. If you are cleaning your own site after a hack, note that site security cannot be assured unless you do a full reinstall if your site has been hacked. We recommend you only use Wordfence Security to get your site into a running state in order to recover the data you need to do a full reinstall. If you need help with a security issue, check out Wordfence Care, which offers hands-on support from our team, including dealing with a hacked site. For mission-critical sites, check out Wordfence Response.

Does Wordfence Security support IPv6?

Yes. We fully support IPv6 with all security functions including country blocking, range blocking, city lookup, whois lookup and all other security functions. If you are not running IPv6, Wordfence will work great on your site too. We are fully compatible with both IPv4 and IPv6 whether you run both or only one addressing scheme.

Does Wordfence Security support Multi-Site installations?

Yes. WordPress Multi-Site is fully supported. Using Wordfence you can scan every blog in your network for malware with one click. If one of your customers posts a page or post with a known malware URL that threatens your whole domain with being blocklisted by Google, we will alert you in the next scan.

What support options are available for Wordfence users?

Providing excellent customer service is very important to us. Our free users receive volunteer-level support in our support forums. Wordfence Premium customers get paid ticket-based support. Wordfence Care customers receive hands-on support including help with security incidents and a yearly security audit. Wordfence Response customers get 24/7/365 support from our incident response team, with a 1 hour response time, and a maximum of 24 hours to resolve a security issue.

Where can I learn more about WordPress security?

Designed for every skill level, The WordPress Security Learning Center is dedicated to deepening users’ understanding of security best practices by providing free access to entry-level articles, in-depth articles, videos, industry survey results, graphics and more.

Where can I find the Wordfence Terms of Service and Privacy Policy?

These are available on our website: Terms of Service and Privacy Policy

Screenshots

Secure your website with Wordfence.

  1. The dashboard gives you an overview of your site's security including notifications, attack statistics and Wordfence feature status.
  2. The firewall protects your site from common types of attacks and known security vulnerabilities.
  3. The Wordfence Security Scanner lets you know if your site has been compromised and alerts you to other security issues that need to be addressed.
  4. Wordfence is highly configurable, with a deep set of options available for each feature. High level scan options are shown above.
  5. Brute Force Protection features protect you from password guessing attacks.
  6. Block attackers by IP, Country, IP range, Hostname, Browser or Referrer.
  7. The Wordfence Live Traffic view shows you real-time activity on your site including bot traffic and exploit attempts.
  8. Take login security to the next level with Two-Factor Authentication.
  9. Logging in is easy with Wordfence 2FA.

Installer

composer require meteorgpl-plugin/wordfence

Les vérifications de licence de l’éditeur sont intactes : activez l’extension dans WordPress avec une clé de licence achetée auprès de l’éditeur.

Licence

L’extension ne déclare aucune licence. Le code est redistribué sous la licence que l’éditeur a déclarée dans les en-têtes de l’extension.

Les illustrations, polices, médias et documents susceptibles d’être soumis à une licence distincte ne sont pas redistribués ; la page sur les licences explique ce qui est remplacé ou supprimé, et l’onglet Sécurité le détaille par version. Le droit au support et aux mises à jour vient avec la licence que vous achetez auprès de l’éditeur.

Envoyer votre avis

Ce qui fonctionne, ce qui ne fonctionne pas, ce qui manque : quelques mots suffisent.

Seulement si vous souhaitez une réponse.

Prise dans votre navigateur, sans cette fenêtre. Les mots de passe, ce que vous avez saisi dans les formulaires, les clés et les jetons sont exclus et remplacés par des blocs gris ; vous pouvez masquer d’autres zones avant l’envoi. Nous conservons les captures 90 jours.

Nous l’enregistrons avec l’adresse de la page, votre langue, la taille de la fenêtre, le navigateur et l’adresse IP, ainsi que votre adresse e-mail si vous en indiquez une. L’adresse IP et le navigateur sont supprimés après 90 jours. Politique de confidentialité.

Toutes les langues