WordPressのセキュリティ
REEID Translate向けのWordPressセキュリティ統合
認証、保護ルール、および強制措置をセキュリティプラグインの下で維持しつつ、WordPressセキュリティプラグインとの文書化された互換性を確認しましょう。
セキュリティ互換性
WordPressセキュリティ統合を閲覧する
セキュリティプラグインの公開済み互換性ガイドや、訪問者向けのログイン・アカウント・セキュリティメッセージのサポート状況を見つけてください。
SSO & SAML Login — Azure AD / Entra ID
SSO & SAML Login — Azure AD / Entra ID — Supports SAML 2.0 and OpenID Connect (OIDC) authentication protocols for Microsoft Azure AD / Entra ID integration.
SSO Enforcer for Jetpack
SSO Enforcer for Jetpack — Enforces Jetpack Secure Sign-On (SSO) as the default login method when WordPress.com login is enabled
SSO for Entra ID
SSO for Entra ID — OAuth-based Single Sign-On (SSO) integration with Microsoft Entra ID
SSO for Microsoft Entra
SSO for Microsoft Entra — Implements OpenID Connect (OIDC) authentication with PKCE flow to securely validate users against Microsoft Entra ID without exposing client secrets.
SSO JumpCloud – Enterprise SAML & SCIM
SSO JumpCloud – Enterprise SAML & SCIM — SAML 2.0 single sign-on integration with JumpCloud identity provider
SSO Login – Universal (OAuth + SAML)
SSO Login – Universal (OAuth + SAML) — Delegates site authentication and profile handling to an external Authress service, bypassing the WordPress user database for login.
Stackedboost Signup Guard – Block Disposable Emails on Registration and Comments
Stackedboost Signup Guard – Block Disposable Emails on Registration and Comments — Blocks disposable email domains during WordPress core account registration and comment submission using a bundled local list.
Stalza Security
Stalza Security — File and WordPress integrity verification using official checksums and local baselines
STAMPT Verify — Human Identity, No Puzzles
STAMPT Verify — Human Identity, No Puzzles — Replaces CAPTCHA challenges with financial institution-backed identity verification via a JavaScript SDK and popup authorization flow.
StaticGuard
StaticGuard — Serves static HTML copies to logged-out visitors while maintaining dynamic WordPress access for authenticated administrators
SteadWeave Companion
SteadWeave Companion — Application-layer security controls including a WAF-like REST pre-filter for malformed requests, oversized payloads, scanner user agents, and high-confidence SQLi/XSS/path-traversal/XXE patterns.
SteadyScore
SteadyScore — Generates a reliability score (0–100) for installed plugins based on six factors: rating, active installs, update recency, compatibility, security vulnerabilities, and author reputation.
Steel Security & Hardening – Site Audit Tools
Steel Security & Hardening – Site Audit Tools — On-demand security scanning that identifies common WordPress hardening gaps, exposed root-level artifacts (e.g., .env, SQL dumps), and configuration risks like XML-RPC availability or default admin usernames.
StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini
StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini — Implements an MCP server for WordPress that external MCP clients can connect to via an SSE URL and OAuth 2.1 (with PKCE) authentication, including standards-based discovery/registration (RFC 9728, RFC 8414, RFC 7591).
Stillward Security
Stillward Security — Non-breaking WordPress hardening including security headers, version hiding, and file editor disabling
Stop Comment Spam
Stop Comment Spam — Filters comments by rejecting those containing predefined forbidden keywords or phrases in the comment content.
Stop Logging Me Out
Stop Logging Me Out — Modifies the WordPress login system to prevent forced logout during valid session reauthentication.
Stop Media Comment Spamming
Stop Media Comment Spamming — Disables comment functionality specifically for media file attachments in the WordPress Media Library.
Stop Search Spam
Stop Search Spam — Blocks malicious internal site search queries to prevent spam injection
Stop Spammers Classic
WordPress anti-spam and login protection plugin with Cloudflare, WooCommerce, Akismet, and third-party anti-spam service support notes.
Stop User Enumeration
Security plugin that blocks user-enumeration requests and logs blocked attempts locally, with optional protections for REST API user requests, author sitemap output, oEmbed author data, and comment author numbers.
Stop XML-RPC Attacks
Stop XML-RPC Attacks — Protects WordPress sites against XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes.
Storm Clean Admin
Storm Clean Admin — Automated detection and management of inactive users based on configurable last-login thresholds.
Streamshield
Streamshield — Automated content moderation for user-generated text, images, video, and audio.