WordPressのセキュリティ
REEID Translate向けのWordPressセキュリティ統合
認証、保護ルール、および強制措置をセキュリティプラグインの下で維持しつつ、WordPressセキュリティプラグインとの文書化された互換性を確認しましょう。
セキュリティ互換性
WordPressセキュリティ統合を閲覧する
セキュリティプラグインの公開済み互換性ガイドや、訪問者向けのログイン・アカウント・セキュリティメッセージのサポート状況を見つけてください。
WP Anti-Clickjack
WP Anti-Clickjack — Adds the `X-Frame-Options: SAMEORIGIN` HTTP response header to help prevent clickjacking via iframe embedding.
WP Anything Downloader
WP Anything Downloader — Adds “Download” links for installed themes from the WordPress Themes/Appearance page, packaging the selected theme folder into a .zip for download.
WP Armour – Honeypot Anti Spam
WP Armour – Honeypot Anti Spam adds honeypot-based spam protection for comments, registration, bbPress forums, and several form plugins.
WP Author Slug
WP Author Slug — Replaces the author slug with a sanitized version of the user’s display name (affecting author archive URL slugs).
WP BASIC Auth
WP BASIC Auth — Provides HTTP Basic Authentication for the WordPress site using a WordPress username and password.
WP Basic Authentication
WP Basic Authentication — Implements HTTP Basic Authentication to protect WordPress sites without requiring .htpasswd configuration
WP Cassify
WP Cassify — CAS Protocol v2 and v3 Authentication
WP Content Copy Protection & No Right Click
WP Content Copy Protection & No Right Click — Protects post content and the home page from copying using JavaScript and CSS-based techniques.
WP Content Copy Protection with Color Design
WP Content Copy Protection with Color Design — Disables right-click on protected pages or posts.
WP Cron HTTP Auth
WP Cron HTTP Auth — Enables WP Cron functionality on sites protected by HTTP Authentication
WP Encryption – One Click HTTPS & Free SSL Certificate, HTTPS Redirect, SSL Security
Security plugin for WordPress that provides SSL certificate setup, HTTPS redirection, mixed content fixing, security headers, scanning, and passkey login features.
WP EXtra – One Click Optimize
WP EXtra – One Click Optimize — Provides login-related protections including a custom login URL, login attempt limiting, and optional Cloudflare Turnstile support for login, registration, and password recovery forms.
WP fail2ban – Advanced Security
WP fail2ban – Advanced Security — Bridges WordPress to fail2ban by emitting WordPress-specific log entries that fail2ban can monitor and act on.
WP fail2ban Blocklist
WP fail2ban Blocklist — Collaborative preemptive IP blocklisting via a Blocklist Network Service (BNS) that collects attack data from participating sites and periodically returns lists of IPs to block before they attack a given site.
WP Fail2Ban Redux
WP Fail2Ban Redux — Logs WordPress authentication events to the server system log for Fail2Ban integration.
WP Fingerprint
WP Fingerprint checks installed plugin files for tampering using checksum validation and reports warnings in the WordPress admin plugins menu.
WP Force Password
WP Force Password — Forces password expiration and updates based on configurable reset days
WP Free SSL
WP Free SSL — Issues free SSL certificates via Let's Encrypt integration
WP Ghost (Hide My WP Ghost) – Security & Firewall
WP Ghost (Hide My WP Ghost) – Security & Firewall — Changes and secures common WordPress paths such as login, admin, content, includes, and REST/API-related paths using server rewrite rules.
WP Hardening (discontinued)
WP Hardening (discontinued) — Runs a security audit to check WordPress version status, outdated plugins, PHP version, file and folder permissions, database password strength, and firewall protection.
WP Hide & Security Enhancer
WP Hide & Security Enhancer — Can rewrite and obscure core WordPress-facing paths, including admin/login, wp-content, wp-includes, plugins, uploads, XML-RPC, comments, author, search, and selected root files.
WP Hide Post — Hide Posts, Pages, Custom Post Types, and Control Products Visibility for WooCommerce
WP Hide Post — Hide Posts, Pages, Custom Post Types, and Control Products Visibility for WooCommerce — Content visibility controls for WordPress posts/pages/custom post types (hide from homepage/blog page, category/tag archives, author/date archives, widgets, and navigation rel links) while keeping direct URLs accessible.
WP Login and Register using JWT
WP Login and Register using JWT — Enables WordPress Single Sign-On (SSO) by authenticating users via JSON Web Tokens (JWT) obtained from external applications or OAuth/OpenID Connect providers.
WP Login Attempts
WP Login Attempts — Implements rate limiting for login attempts with temporary IP blocking to mitigate brute force attacks.