Vai al contenuto principale
MeteorGPLby WebbingApps
W

Wordfence Security

Plugin
Segui 0 Metti una stella 0
Installa

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

  • 0 stelle
  • 0 lo seguono
  • 0 download
  • Licenza non dichiarata

Versioni 0

Dalla più recente · ogni versione analizzata prima della pubblicazione
Mostra 150 versioni non ancora disponibili

Release indicate nel changelog del produttore o su WordPress.org che il repository non ha ancora.

  1. 9.0.2 Non ancora disponibile

    Change: Changed IPv6 diagnostics result to be informational only

    Voce del changelog

  2. 9.0.1 Non ancora disponibile

    Improvement: UX enhancements for passkey authentication and general login security

    Voce del changelog

  3. 9.0.0 Non ancora disponibile

    Improvement: Added support for passkey authentication

    Voce del changelog

  4. 8.2.2 Non ancora disponibile

    Improvement: Better presentation of Live Traffic data on wide screens

    Voce del changelog

  5. 8.2.1 Non ancora disponibile

    Fix: Fixed issue with some i18n plugins/themes when a user has no 2FA recovery codes

    Voce del changelog

  6. 8.2.0 Non ancora disponibile

    Improvement: Migrated all deprecated JavaScript libraries in use to a Vue-based infrastructure

    Voce del changelog

  7. 8.1.4 Non ancora disponibile

    Fix: Fixed an issue with inetpton introduced by a recent patch to PHP 8.1+ that could cause a fatal error if a malformed IP address was pass...

    Voce del changelog

  8. 8.1.3 Non ancora disponibile

    Improvement: Updated the bundled geoip database

    Voce del changelog

  9. 8.1.2 Non ancora disponibile

    Improvement: Updated the bundled geoip database

    Voce del changelog

  10. 8.1.1 Non ancora disponibile

    Improvement: Improved localization support for the various block screens and messages

    Voce del changelog

  11. 8.1.0 Non ancora disponibile

    Improvement: Added password scanning support for WordPress 6.8 and later

    Voce del changelog

  12. 8.0.5 Non ancora disponibile

    Fix: Compatibility fixes for WordPress 6.8

    Voce del changelog

  13. 8.0.4 Non ancora disponibile

    Improvement: Improved error handling and messaging for some responses from our servers

    Voce del changelog

  14. 8.0.3 Non ancora disponibile

    Improvement: Added support for hosts relocating the WAF's auto-prepend file via the constant/envvar WORDFENCEWAFPREPENDDIRECTORY

    Voce del changelog

  15. 8.0.2 Non ancora disponibile

    Improvement: General compatibility improvements and better error handling for PHP 8+

    Voce del changelog

  16. 8.0.1 Non ancora disponibile

    Improvement: Updated GeoIP database

    Voce del changelog

  17. 8.0.0 Non ancora disponibile

    Improvement: Introduced the Wordfence Audit Log, a new premium feature to monitor all changes and actions in security-sensitive areas of the...

    Voce del changelog

  18. 7.11.7 Non ancora disponibile

    Improvement: Optimized scan performance by reducing database queries by approximately 38% along with CPU usage

    Voce del changelog

  19. 7.11.6 Non ancora disponibile

    Improvement: Revised the strong password requirements notice to be more readable

    Voce del changelog

  20. 7.11.5 Non ancora disponibile

    Fix: Revised the behavior of the reCAPTCHA verification to use the documented expiration period of the token and response to avoid sending v...

    Voce del changelog

  21. 7.11.4 Non ancora disponibile

    Change: CAPTCHA verification when enabled now additionally applies to 2FA logins (may send an email verification on low scores) and no longe...

    Voce del changelog

  22. 7.11.3 Non ancora disponibile

    Fix: Fixed an issue with sites containing invalid Wordfence Central site data where they could throw an error when viewing Wordfence pages

    Voce del changelog

  23. 7.11.2 Non ancora disponibile

    Improvement: Enhanced the vulnerability scan to check and alert for WordPress core vulnerabilities and to adjust the severity of the scan re...

    Voce del changelog

  24. 7.11.1 Non ancora disponibile

    Improvement: Added ".env" to the files checked for "Scan for publicly accessible configuration, backup, or log files"

    Voce del changelog

  25. 7.11.0 Non ancora disponibile

    Improvement: Added new functionality for trusted proxy presets to support proxies such as Amazon CloudFront, Ezoic, and Quic.cloud

    Voce del changelog

  26. 7.10.7 Non ancora disponibile

    Fix: Compatibility fix for WordPress 6.4 on the login page styling

    Voce del changelog

  27. 7.10.6 Non ancora disponibile

    Fix: Addressed an issue with multisite installations when the wpoptions tables had different encodings/collations

    Voce del changelog

  28. 7.10.5 Non ancora disponibile

    Improvement: Updated the bundled GeoIP database

    Voce del changelog

  29. 7.10.4 Non ancora disponibile

    Improvement: "Admin created outside of WordPress" scan results may now be reviewed and approved

    Voce del changelog

  30. 7.10.3 Non ancora disponibile

    Improvement: Updated GeoIP database

    Voce del changelog

  31. 7.10.2 Non ancora disponibile

    Fix: Prevented bundled sodiumcompat library from conflicting with versions included with older WordPress versions

    Voce del changelog

  32. 7.10.1 Non ancora disponibile

    Improvement: Added support for processing arrays of files in the WAF

    Voce del changelog

  33. 7.10.0 Non ancora disponibile

    Improvement: Added translation support for strings from login security plugin

    Voce del changelog

  34. 7.9.3 Non ancora disponibile

    Improvement: Added exception handling to prevent WAF errors from being fatal

    Voce del changelog

  35. 7.9.2 Non ancora disponibile

    Improvement: The vulnerability severity score (CVSS) is now shown with any vulnerability findings from the scanner

    Voce del changelog

  36. 7.9.1 Non ancora disponibile

    Improvement: Further improved performance when viewing 2FA settings and hid user counts by default on sites with many users

    Voce del changelog

  37. 7.9.0 Non ancora disponibile

    Improvement: Added 2FA management shortcode and WooCommerce account integration

    Voce del changelog

  38. 7.8.2 Non ancora disponibile

    Fix: Releasing same changes as 7.8.1, due to wordpress.org error

    Voce del changelog

  39. 7.8.1 Non ancora disponibile

    Improvement: Added more granualar data deletion options to deactivation prompt

    Voce del changelog

  40. 7.8.0 Non ancora disponibile

    Improvement: Added feedback when login form is submitted with 2FA

    Voce del changelog

  41. 7.7.1 Non ancora disponibile

    Fix: Prevented scan resume attempts from repeating indefinitely when the initial scan stage fails

    Voce del changelog

  42. 7.7.0 Non ancora disponibile

    Improvement: Added configurable scan resume functionality to prevent scan failures on sites with intermittent connectivity issues

    Voce del changelog

  43. 7.6.2 Non ancora disponibile

    Improvement: Hardened 2FA login flow to reduce exposure in cases where an attacker is able to obtain privileged information from the databas...

    Voce del changelog

  44. 7.6.1 Non ancora disponibile

    Fix: Prevented XSS that would have required admin privileges to exploit (CVE-2022-3144)

    Voce del changelog

  45. 7.6.0 Non ancora disponibile

    Improvement: Added option to start scans using only IPv4

    Voce del changelog

  46. 7.5.11 Non ancora disponibile

    Improvement: Added option to toggle display of last login column on WP Users page

    Voce del changelog

  47. 7.5.10 Non ancora disponibile

    Improvement: Improved scan support for sites with non-standard directory structures

    Voce del changelog

  48. 7.5.9 Non ancora disponibile

    Improvement: Updated GeoIP database

    Voce del changelog

  49. 7.5.8 Non ancora disponibile

    Launch of Wordfence Care and Wordfence Response

    Voce del changelog

  50. 7.5.7 Non ancora disponibile

    Improvement: Made preliminary changes for compatibility with PHP 8.1

    Voce del changelog

  51. 7.5.6 Non ancora disponibile

    Fix: Prevented login errors with WooCommerce integration when manual username entry is enabled on the WooCommerce registration form

    Voce del changelog

  52. 7.5.5 Non ancora disponibile

    Improvement: Enhanced accessibility

    Voce del changelog

  53. 7.5.4 Non ancora disponibile

    Fix: Resolve conflict with woocommerce-gateway-amazon-payments-advanced plugin

    Voce del changelog

  54. 7.5.3 Non ancora disponibile

    Improvement: Expanded WAF capabilities including better JSON and user permission handling

    Voce del changelog

  55. 7.5.2 Non ancora disponibile

    Fix: Fixed fatal error on single-sites running WordPress

    Voce del changelog

  56. 7.5.1 Non ancora disponibile

    Fix: Fixed fatal error when viewing the Login Security settings page from an allowlisted IP.

    Voce del changelog

  57. 7.5.0 Non ancora disponibile

    Improvement: Translation-readiness: All user-facing strings are now run through WordPress's i18n functions.

    Voce del changelog

  58. 7.4.14 Non ancora disponibile

    Improvement: Added option to disable application passwords.

    Voce del changelog

  59. 7.4.12 Non ancora disponibile

    Improvement: Initial integration of i18n in Wordfence.

    Voce del changelog

  60. 7.4.11 Non ancora disponibile

    Improvement: Added diagnostic debug button to clear Wordfence Central connection data from the database.

    Voce del changelog

  61. 7.4.10 Non ancora disponibile

    Improvement: Prevent author sitemap from leaking usernames in WordPress >= 5.5.0.

    Voce del changelog

  62. 7.4.9 Non ancora disponibile

    Improvement: Added list of known malicious usernames to suspicious administrator scan.

    Voce del changelog

  63. 7.4.8 Non ancora disponibile

    Fix: Fixed issue with fatal errors encountered during activation under certain conditions.

    Voce del changelog

  64. 7.4.7 Non ancora disponibile

    Improvement: Updated bundled GeoIP database.

    Voce del changelog

  65. 7.4.6 Non ancora disponibile

    Improvement: Enhanced the detection ability of the WAF for SQLi attacks.

    Voce del changelog

  66. 7.4.5 Non ancora disponibile

    Improvement: Improved WAF coverage for an Infinite WP authentication bypass vulnerability.

    Voce del changelog

  67. 7.4.4 Non ancora disponibile

    Fix: Fixed a UI issue where the scan summary status marker for malware didn't always match the findings.

    Voce del changelog

  68. 7.4.3 Non ancora disponibile

    Improvement: Added WAF coverage for an Infinite WP authentication bypass vulnerability.

    Voce del changelog

  69. 7.4.2 Non ancora disponibile

    Improvement: Increased performance of IP CIDR range comparisons.

    Voce del changelog

  70. 7.4.1 Non ancora disponibile

    Improvement: Updated the bundled GeoIP database.

    Voce del changelog

  71. 7.4.0 Non ancora disponibile

    Improvement: Added a MySQL-based configuration and data storage for the WAF to expand the number of hosting environments supported. For more...

    Voce del changelog

  72. 7.3.6 Non ancora disponibile

    Improvement: Multiple "php.ini file in core directory" issues are now consolidated into a single issue for clearer scan results.

    Voce del changelog

  73. 7.3.5 Non ancora disponibile

    Improvement: Improved tagging of the login endpoint for brute force protection.

    Voce del changelog

  74. 7.3.4 Non ancora disponibile

    Improvement: Added security events and alerting features built into Wordfence Central.

    Voce del changelog

  75. 7.3.3 Non ancora disponibile

    Improvement: Added support for managing the login security settings to Wordfence Central.

    Voce del changelog

  76. 7.3.2 Non ancora disponibile

    Improvement: Updated sodiumcompat to address an incompatibility that may occur with the pending WordPress 5.2.1 update.

    Voce del changelog

  77. 7.3.1 Non ancora disponibile

    Improvement: Two-factor authentication is new and improved, now available on all Premium and Free installations.

    Voce del changelog

  78. 7.2.5 Non ancora disponibile

    Improvement: Added additional data breach records to the breached password check.

    Voce del changelog

  79. 7.2.4 Non ancora disponibile

    Improvement: Updated vulnerability database integration.

    Voce del changelog

  80. 7.2.3 Non ancora disponibile

    Improvement: Country names are now shown instead of two letter codes where appropriate.

    Voce del changelog

  81. 7.2.2 Non ancora disponibile

    Improvement: Updated GeoIP database.

    Voce del changelog

  82. 7.2.1 Non ancora disponibile

    Improvement: Integrated Wordfence with Wordfence Central, a new service allowing you to manage multiple Wordfence installations from a singl...

    Voce del changelog

  83. 7.1.20 Non ancora disponibile

    Fix: Fixed a commit error with 7.1.19

    Voce del changelog

  84. 7.1.19 Non ancora disponibile

    Improvement: Speed optimizations for WAF rule compilation.

    Voce del changelog

  85. 7.1.18 Non ancora disponibile

    Improvement: Removed unused font glyph ranges to reduce file count and size.

    Voce del changelog

  86. 7.1.17 Non ancora disponibile

    Improvement: Increased frequency of filesystem permission check and update of the WAF config files.

    Voce del changelog

  87. 7.1.16 Non ancora disponibile

    Improvement: Service allowlisting can now be selectively toggled on or off per service.

    Voce del changelog

  88. 7.1.15 Non ancora disponibile

    Fix: Addressed a plugin conflict with the composer autoloader.

    Voce del changelog

  89. 7.1.14 Non ancora disponibile

    Improvement: Reduced queries and potential table size for rate limiting-related data.

    Voce del changelog

  90. 7.1.12 Non ancora disponibile

    Improvement: Updated bundled GeoIP database.

    Voce del changelog

  91. 7.1.11 Non ancora disponibile

    Improvement: Added a custom message field that will show on all block pages.

    Voce del changelog

  92. 7.1.10 Non ancora disponibile

    Improvement: Better labeling in Live Traffic for 301 and 302 redirects.

    Voce del changelog

  93. 7.1.9 Non ancora disponibile

    Improvement: Added an "unsubscribe" link to plugin-generated alerts.

    Voce del changelog

  94. 7.1.8 Non ancora disponibile

    Improvement: Better detection of removal status when uninstalling the WAF's auto-prepend file.

    Voce del changelog

  95. 7.1.7 Non ancora disponibile

    Improvement: Added better support for keyboard navigation of options.

    Voce del changelog

  96. 7.1.6 Non ancora disponibile

    Fix: Added a workaround for sites with inaccessible WAF config files when reading php://input

    Voce del changelog

  97. 7.1.5 Non ancora disponibile

    Improvement: GDPR compliance updates.

    Voce del changelog

  98. 7.1.4 Non ancora disponibile

    Improvement: Added additional XSS detection capabilities.

    Voce del changelog

  99. 7.1.3 Non ancora disponibile

    Improvement: Improved the performance of our config table status check.

    Voce del changelog

  100. 7.1.2 Non ancora disponibile

    Improvement: Added support for filtering the blocks list.

    Voce del changelog

Tutte le 150 release non ancora disponibili, nel changelog

Readme

Licenza

Wordfence Security

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

https://www.youtube.com/watch?v=i4ZN2TwlaBE

THE MOST POPULAR WORDPRESS FIREWALL & SECURITY SCANNER

WordPress security requires a team of dedicated analysts researching the latest malware variants and WordPress exploits, turning them into firewall rules and malware signatures, and releasing those to customers in real-time.

Choose the right protection for you: Wordfence Free, Premium, Care or Response

Wordfence is widely acknowledged as the number one WordPress security research team in the World. Our plugin provides a comprehensive suite of security features, and our team’s research is what powers our plugin and provides the level of security that we are known for.

At Wordfence, WordPress security isn’t a division of our business – WordPress security is all we do. We employ a global 24-hour dedicated incident response team that provides our priority customers with a 1 hour response time for any security incident.

The sun never sets on our global security team and we run a sophisticated threat intelligence platform to aggregate, analyze and produce ground breaking security research on the newest security threats.

Wordfence Security includes an endpoint firewall, malware scanner, robust login security features, live traffic views, and more. Our Threat Defense Feed arms Wordfence with the newest firewall rules, malware signatures, and malicious IP addresses it needs to keep your website safe.

Rounded out by passkeys, 2FA, and a suite of additional features, Wordfence is the most comprehensive WordPress security solution available.

🔥 WORDPRESS FIREWALL

  • Web Application Firewall identifies and blocks malicious traffic. Built and maintained by a large team focused 100% on WordPress security.
  • Real-time firewall rule and malware signature [Premium] updates via the Threat Defense Feed (free version is delayed by 30 days).
  • Real-time IP Blocklist [Premium] blocks all requests from the most malicious IPs, protecting your site while reducing load.
  • Protects your site at the endpoint, enabling deep integration with WordPress. Unlike cloud alternatives, it does not break encryption, cannot be bypassed and cannot leak data.
  • Integrated malware scanner blocks requests that include malicious code or content.
  • Protection from brute force attacks by limiting login attempts.

📡 WORDPRESS SECURITY SCANNER

  • Malware scanner checks core files, themes and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections.
  • Real-time malware signature updates [Premium] via the Threat Defense Feed (free version is delayed by 30 days).
  • Compares with WordPress.org repository your core files, themes and plugins, checking their integrity and reporting any changes to you.
  • Repair WordPress core, theme, and plugin files that have changed by overwriting them with a pristine, original version. Delete any files that don’t belong easily within the Wordfence interface.
  • Malware Removal Tools "Delete File" and "Delete All Deletable Files" options allow for efficient malware removal. Remember to investigate the scan results and backup files first!
  • Checks your site for known security vulnerabilities and alerts you to any issues. Also alerts you to potential security issues when a plugin has been closed or abandoned.
  • Checks your content safety by scanning file contents, posts and comments for dangerous URLs and suspicious content.
  • Checks to see if your site or IP have been blocklisted [Premium] for malicious activity, generating spam or other security issues.

🔒 LOGIN SECURITY

  • Passkeys let users sign in with touch, facial recognition, a device password, or a PIN as a simple and secure alternative to a password and two-factor credentials.
  • Two-factor authentication (2FA), one of the most secure forms of remote system authentication available via any TOTP-based authenticator app or service.
  • Login Page CAPTCHA stops bots from logging in.
  • Passkey and 2FA management for WooCommerce and custom integrations allows users to manage credentials on custom account pages.
  • XML-RPC options including disabling or adding 2FA.
  • Password Security: Block logins for administrators using known compromised passwords.

📋 SECURITY AUDIT LOG [Premium]

  • The Audit Log monitors all changes and actions in security-sensitive areas of the site.
  • Remote tamper-proof data storage via Wordfence Central.
  • Monitor events and actions ranging from user creation and editing to plugin/theme installation and updates to post and page changes.
  • Configurable to log all events or significant events only, which includes all authentication, site configuration, and site functionality events.

🌐 WORDFENCE CENTRAL

  • Wordfence Central is a powerful and efficient way to manage the security for multiple sites in one place.
  • Centralized management: Efficiently assess the security status of all your websites in one view. View detailed security findings without leaving Wordfence Central.
  • Powerful templates make configuring Wordfence a breeze.
  • Highly configurable alerts can be delivered via email, SMS or Slack. Improve the signal to noise ratio by leveraging severity level options and a daily digest option.
  • Track and alert on important security events including administrator logins, breached password usage and surges in attack activity.
  • Free to use for unlimited sites.

🛠️ SECURITY TOOLS

  • Live Traffic monitors visits and hack attempts not shown in other analytics packages in real time; including origin, their IP address, the time of day and time spent on your site.
  • Block attackers by IP or build advanced rules based on IP Range, Hostname, User Agent and Referrer.
  • Country blocking available with Wordfence Premium.

Cosa aggiunge

  • Si integra con WooCommerce

Installation

Secure your website using the following steps to install Wordfence:

  1. Install Wordfence automatically or by uploading the ZIP file.
  2. Activate the Wordfence through the 'Plugins' menu in WordPress. Wordfence is now activated.
  3. Go to the scan menu and start your first scan. Scheduled scanning will also be enabled.
  4. Once your first scan has completed, a list of threats will appear. Go through them one by one to secure your site.
  5. Visit the Wordfence options page to enter your email address so that you can receive email security alerts.
  6. Optionally, change your security level or adjust the advanced options to set individual scanning and protection options for your site.
  7. Click the "Live Traffic" menu option to watch your site activity in real-time. Situational awareness is an important part of website security.

To install Wordfence on WordPress Multi-Site installations:

  1. Install Wordfence via the plugin directory or by uploading the ZIP file.
  2. Network Activate Wordfence. This step is important because until you network activate it, your sites will see the plugin option on their plugins menu. Once activated that option disappears.
  3. Now that Wordfence is network activated it will appear on your Network Admin menu. Wordfence will not appear on any individual site's menu.
  4. Go to the "Scan" menu and start your first scan.
  5. Wordfence will do a scan of all files in your WordPress installation including those in the blogs.dir directory of your individual sites.
  6. Live Traffic will appear for ALL sites in your network. If you have a heavily trafficked system you may want to disable live traffic which will stop logging to the DB.
  7. Firewall rules and login rules apply to the WHOLE system. So if you fail a login on site1.example.com and site2.example.com it counts as 2 failures. Crawler traffic is counted between blogs, so if you hit three sites in the network, all the hits are totalled and that counts as the rate you're accessing the system.

Faq

Visit our website to access our official documentation which includes security feature descriptions, common solutions and comprehensive help.

How does Wordfence Security protect sites from attackers?

The WordPress security plugin provides the best protection available for your website. Powered by the constantly updated Threat Defense Feed, Wordfence Firewall stops you from getting hacked. Wordfence Scan leverages the same proprietary feed, alerting you quickly about security issues or if your site is compromised. The Live Traffic view gives you real-time visibility into traffic and hack attempts on your website. A deep set of additional tools round out the most comprehensive WordPress security solution available.

What features does Wordfence Premium enable?

We offer a Premium API key that gives you real-time updates to the Threat Defense Feed which includes a real-time IP blocklist, firewall rules, and malware signatures. Premium support, country blocking, more frequent scans, and spam and spamvertising checks are also included. Click here to sign-up for Wordfence Premium now or simply install Wordfence free and start protecting your website.

How does the Wordfence WordPress Firewall protect websites?

  • Web Application Firewall stops you from getting hacked by identifying malicious traffic, blocking attackers before they can access your website.
  • Threat Defense Feed automatically updates firewall rules that protect you from the latest threats. Premium members receive the real-time version.
  • Block common WordPress security threats like fake Googlebots, malicious scans from hackers and botnets.

What checks does the Wordfence Security Scanner perform?

  • Scans core files, themes and plugins against WordPress.org repository versions to check their integrity. Verify security of your source.
  • See how files have changed. Optionally repair changed files that are security threats.
  • Scans for signatures of over 44,000 known malware variants that are known WordPress security threats.
  • Scans for many known backdoors that create security holes including C99, R57, RootShell, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx and many more.
  • Continuously scans for malware and phishing URL’s including all URLs on the Google Safe Browsing List in all your comments, posts and files that are security threats.
  • Scans for heuristics of backdoors, trojans, suspicious code and other security issues.

What security monitoring features does Wordfence include?

  • See all your traffic in real-time, including robots, humans, 404 errors, logins and logouts and who is consuming most of your content. Enhances your situational awareness of which security threats your site is facing.
  • A real-time view of all traffic including automated bots that often constitute security threats that Javascript analytics packages never show you.
  • Real-time traffic includes reverse DNS and city-level geolocation. Know which geographic area security threats originate from.
  • Monitors disk space which is related to security because many DDoS attacks attempt to consume all disk space to create denial of service.

What login security features are included

  • See all your traffic in real-time, including robots, humans, 404 errors, logins and logouts and who is consuming most of your content. Enhances your situational awareness of which security threats your site is facing.
  • A real-time view of all traffic including automated bots that often constitute security threats that Javascript analytics packages never show you.
  • Real-time traffic includes reverse DNS and city-level geolocation. Know which geographic area security threats originate from.
  • Monitors disk space which is related to security because many DDoS attacks attempt to consume all disk space to create denial of service.

How will I be alerted if my site has a security problem?

Wordfence sends security alerts via email. Once you install Wordfence, you will configure a list of email addresses where security alerts will be sent. When you receive a security alert, make sure you deal with it promptly to ensure your site stays secure.

Do I need a security plugin like Wordfence if I’m using a cloud based firewall (WAF)?

Wordfence provides true endpoint security for your WordPress website. Unlike cloud based firewalls, Wordfence executes within the WordPress environment, giving it knowledge like whether the user is signed in, their identity and what access level they have. Wordfence uses the user’s access level in more than 80% of the firewall rules it uses to protect WordPress websites. Learn more about the Cloud WAF identity problem here. Additionally, cloud based firewalls can be bypassed, leaving your site exposed to attackers. Because Wordfence is an integral part of the endpoint (your WordPress website), it can’t be bypassed. Learn more about the Cloud WAF bypass problem here. To fully protect the investment you’ve made in your website you need to employ a defense in depth approach to security. Wordfence takes this approach.

What blocking features does Wordfence include?

  • Real-time blocking of known attackers. If another site using Wordfence is attacked and blocks the attacker, your site is automatically protected.
  • Block entire malicious networks. Includes advanced IP and Domain WHOIS to report malicious IP’s or networks and block entire networks using the firewall. Report WordPress security threats to network owner.
  • Rate limit or block WordPress security threats like aggressive crawlers, scrapers and bots doing security scans for vulnerabilities in your site.
  • Choose whether you want to block or throttle users and robots who break your WordPress security rules.
  • Premium users can also block countries and schedule scans for specific times and a higher frequency.

What differentiates Wordfence from other WordPress Security plugins?

  • Wordfence Security provides a WordPress Firewall developed specifically for WordPress and blocks attackers looking for vulnerabilities on your site. The Firewall is powered by our Threat Defense Feed which is continually updated as new threats emerge. Premium customers receive updates in real-time.
  • Wordfence verifies your website source code integrity against the official WordPress repository and shows you the changes.
  • Wordfence scans check all your files, comments and posts for URLs in Google's Safe Browsing list. We are the only plugin to offer this very important security enhancement.
  • Wordfence scans do not consume large amounts of your bandwidth because all security scans happen on your web server which makes them very fast.
  • Wordfence fully supports WordPress Multi-Site which means you can security scan every blog in your Multi-Site installation with one click.
  • Wordfence includes passkeys and Two-Factor authentication to help secure WordPress accounts against phishing and brute-force attacks.
  • Wordfence fully supports IPv6 including giving you the ability to look up the location of IPv6 addresses, block IPv6 ranges, detect IPv6 country and do a whois lookup on IPv6 addresses and more.

Will Wordfence slow down my website?

No. Wordfence Security is extremely fast and uses techniques like caching its own configuration data to avoid database lookups and blocking malicious attacks that would slow down your site.

What if my site has already been hacked?

Wordfence Security is able to repair core files, themes and plugins on sites where security is already compromised. You can follow this guide on how to clean a hacked website using Wordfence. If you are cleaning your own site after a hack, note that site security cannot be assured unless you do a full reinstall if your site has been hacked. We recommend you only use Wordfence Security to get your site into a running state in order to recover the data you need to do a full reinstall. If you need help with a security issue, check out Wordfence Care, which offers hands-on support from our team, including dealing with a hacked site. For mission-critical sites, check out Wordfence Response.

Does Wordfence Security support IPv6?

Yes. We fully support IPv6 with all security functions including country blocking, range blocking, city lookup, whois lookup and all other security functions. If you are not running IPv6, Wordfence will work great on your site too. We are fully compatible with both IPv4 and IPv6 whether you run both or only one addressing scheme.

Does Wordfence Security support Multi-Site installations?

Yes. WordPress Multi-Site is fully supported. Using Wordfence you can scan every blog in your network for malware with one click. If one of your customers posts a page or post with a known malware URL that threatens your whole domain with being blocklisted by Google, we will alert you in the next scan.

What support options are available for Wordfence users?

Providing excellent customer service is very important to us. Our free users receive volunteer-level support in our support forums. Wordfence Premium customers get paid ticket-based support. Wordfence Care customers receive hands-on support including help with security incidents and a yearly security audit. Wordfence Response customers get 24/7/365 support from our incident response team, with a 1 hour response time, and a maximum of 24 hours to resolve a security issue.

Where can I learn more about WordPress security?

Designed for every skill level, The WordPress Security Learning Center is dedicated to deepening users’ understanding of security best practices by providing free access to entry-level articles, in-depth articles, videos, industry survey results, graphics and more.

Where can I find the Wordfence Terms of Service and Privacy Policy?

These are available on our website: Terms of Service and Privacy Policy

Screenshots

Secure your website with Wordfence.

  1. The dashboard gives you an overview of your site's security including notifications, attack statistics and Wordfence feature status.
  2. The firewall protects your site from common types of attacks and known security vulnerabilities.
  3. The Wordfence Security Scanner lets you know if your site has been compromised and alerts you to other security issues that need to be addressed.
  4. Wordfence is highly configurable, with a deep set of options available for each feature. High level scan options are shown above.
  5. Brute Force Protection features protect you from password guessing attacks.
  6. Block attackers by IP, Country, IP range, Hostname, Browser or Referrer.
  7. The Wordfence Live Traffic view shows you real-time activity on your site including bot traffic and exploit attempts.
  8. Take login security to the next level with Two-Factor Authentication.
  9. Logging in is easy with Wordfence 2FA.

Installa

composer require meteorgpl-plugin/wordfence

I controlli di licenza del produttore sono intatti: attiva il plugin in WordPress con una chiave di licenza acquistata dal produttore.

Licenza

Il plugin non dichiara alcuna licenza. Il codice è ridistribuito con la licenza dichiarata dal produttore nelle intestazioni del plugin stesso.

Grafica, font, media e documenti che possono avere una licenza separata non vengono ridistribuiti; la pagina sulle licenze spiega cosa viene sostituito o rimosso e la scheda sicurezza lo elenca per ogni versione. Il diritto a supporto e aggiornamenti è incluso nella licenza che acquisti dal produttore.

Invia feedback

Cosa funziona, cosa no, cosa manca: bastano poche parole.

Solo se desideri una risposta.

Viene acquisito nel tuo browser, senza questa finestra. Password, ciò che hai digitato nei moduli, chiavi e token vengono esclusi come blocchi grigi; prima dell’invio puoi nascondere altre parti. Conserviamo gli screenshot per 90 giorni.

Lo conserviamo con l’indirizzo della pagina, la tua lingua, le dimensioni della finestra, il browser e l’indirizzo IP, e il tuo indirizzo e-mail, se ce lo indichi. L’indirizzo IP e il browser vengono eliminati dopo 90 giorni. Informativa sulla privacy.

Tutte le lingue