WordPress 安全性
适用于 REEID Translate 的 WordPress 安全集成
探索与 WordPress 安全插件的文档化兼容性,同时将身份验证、防护规则及执行机制保留在安全插件内部。
安全兼容性
浏览 WordPress 安全集成
查找已发布的安全插件兼容指南,以及支持面向访客的登录、账户和安全消息。
WP Force Password
WP Force Password — Forces password expiration and updates based on configurable reset days
WP Free SSL
WP Free SSL — Issues free SSL certificates via Let's Encrypt integration
WP Generator Remover by Dawsun
WP Generator Remover by Dawsun — Removes the WordPress generator meta tag from page source
WP Ghost (Hide My WP Ghost) – Security & Firewall
WP Ghost (Hide My WP Ghost) – Security & Firewall — Changes and secures common WordPress paths such as login, admin, content, includes, and REST/API-related paths using server rewrite rules.
WP Guardian
WP Guardian — Provides a Security Assessment dashboard that audits PHP version support, REST API user enumeration, XML-RPC reachability, and anonymous access to Abilities API endpoints.
WP Hardening (discontinued)
WP Hardening (discontinued) — Runs a security audit to check WordPress version status, outdated plugins, PHP version, file and folder permissions, database password strength, and firewall protection.
WP Hide & Security Enhancer
WP Hide & Security Enhancer — Can rewrite and obscure core WordPress-facing paths, including admin/login, wp-content, wp-includes, plugins, uploads, XML-RPC, comments, author, search, and selected root files.
WP Hide Post — Hide Posts, Pages, Custom Post Types, and Control Products Visibility for WooCommerce
WP Hide Post — Hide Posts, Pages, Custom Post Types, and Control Products Visibility for WooCommerce — Content visibility controls for WordPress posts/pages/custom post types (hide from homepage/blog page, category/tag archives, author/date archives, widgets, and navigation rel links) while keeping direct URLs accessible.
WP Login and Register using JWT
WP Login and Register using JWT — Enables WordPress Single Sign-On (SSO) by authenticating users via JSON Web Tokens (JWT) obtained from external applications or OAuth/OpenID Connect providers.
WP Login Attempts
WP Login Attempts — Implements rate limiting for login attempts with temporary IP blocking to mitigate brute force attacks.
WP Login Door
WP Login Door — Adds a secret URL key parameter requirement to the WordPress login page access.
WP Mailto Links – Protect Email Addresses
Protects and encodes email addresses, with support for mailto links, plain email addresses, email input fields, RSS feeds, shortcodes, and template tags.
WP Managed
WP Managed — Limit login attempts with IP-based tracking to prevent brute-force attacks
WP OAuth Server ( Login with WordPress )
WP OAuth Server ( Login with WordPress ) — Turns WordPress into an OAuth 2.0 and OpenID Connect (OIDC) Identity Provider for Single Sign-On (SSO).
WP OAuth Server (OAuth Authentication)
WP OAuth Server (OAuth Authentication) — OAuth 2.0 authentication for WordPress REST API calls (authorized calls to protected REST API endpoints).
WP One Tap Google Sign In
WP One Tap Google Sign In — Server-side verification of Google ID tokens against configured OAuth client IDs to ensure authentication integrity.
WP Posts Carousel
WP Posts Carousel — Provides a widget and a shortcode generator to display selected posts/custom post types in an Owl Carousel front-end component.
WP Protect Content
WP Protect Content — Client-side content protection mechanisms including disabling copy, right-click, and developer tools (F12/Inspect Element).
WP Quick Post Duplicator
WP Quick Post Duplicator — Duplicates/clones WordPress post types (including pages), custom post types, custom taxonomies, and custom fields via an editor UI action (“Duplicate This Item”).
WP REST API Key Authentication
WP REST API Key Authentication — Adds API key-based authentication to the WordPress REST API
WP SAML Auth
WP SAML Auth adds SAML-based authentication to WordPress, with login-page access, optional user creation, logout handling, backend configuration, and WP-CLI support.
WP Secure Content
WP Secure Content — Secures posts and pages content
WP Shield
WP Shield — Implements HTTP Basic Authentication to secure development, staging, and UAT environments
WP Show Site by IP
WP Show Site by IP — Gates public site and /wp-admin/ access behind an IP whitelist, displaying a customizable temporary HTML page to unauthorized visitors.