Solutiontech Seguridad de acceso compatibility with REEID Translate

Plugin capabilities

• Custom login URL protection and regeneration, including blocking direct access to wp-login.php and wp-admin routes for visitors.
• Micro-WAF web application firewall with neutralization/mitigation for SQL injection (SQLi), cross-site scripting (XSS), path traversal (LFI), remote code execution (RCE), and malicious security scanners.
• Brute-force protection with progressive lockout tiers, configurable login attempt limiting by IP address (via WordPress transients), and generic login errors to reduce account enumeration.
• Two-factor authentication options including TOTP (RFC 6238) via authenticator apps (QR pairing) and 2FA via email OTP, plus emergency backup recovery codes to prevent lockouts.
• IP-based access controls including IP whitelist and permanent blacklist (including CIDR ranges) across the website, and optional GeoIP country restriction based on visitor country code (from reverse proxies and Cloudflare).
• Malware and integrity protections including scanning uploaded files (/wp-content/uploads/) for suspicious executable PHP scripts/backdoors and a WordPress core file integrity checker that verifies local core files against official WordPress.org cryptographic MD5 checksums.
• Bot and form-abuse protections including Cloudflare Turnstile anti-bot challenges (login/registration/lost password), optional Google reCAPTCHA v3 on login and lost-password forms, and an invisible honeypot anti-spam across login/password recovery/registration/comment forms.
• Security event logging and monitoring including an optional local audit log (authentication/administration events) with retention controls and a 404 monitor that stores requested paths (without query parameters), referrers (without query parameters), device/browser description, hit counts, and detection times (excluding IP addresses).