Barbwire Security

This plugin enhances the WordPress security.

Author:barbwire.co.jp (profile at wordpress.org)
WordPress version required:4.6
WordPress version tested:5.7.2
Plugin version:2.1.0
Added to WordPress repository:16-10-2016
Last updated:12-03-2021
Warning! This plugin has not been updated in over 2 years. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.
Rating, %:80
Rated by:2
Plugin URI:http://barbwire.co.jp/plugin/barb-pack
Total downloads:2 541
Active installs:80+
plugin download
Click to start download

This plugin enhances the WordPress security.
Effective such as the brute force attack.
Includes the following specific functions.

1.Google reCaptcha v3 protect login screen from bot attacks.

2.Change the URL of the login screen, to avoid attacks on the login screen.
You can ward off tying for try to login for cracking, such as Brute-force attack.
Adding parameter to login URL so that default login url will hidden.

3.Block the display of author archive page
WordPress leaks your login id because of redirect author archive page by author id to login id.
(If you enter “your-site-url/?author=1”, you can try it.)
Simply hideing author archive page so that block to leak login id.

4.To limiting the part of the XML-RCP feature prevents the attack.
Block DDOS attacks against other sites with yor WordPress site, pingback enabled.
Block login via XML-RPC.

5.Disable the REST API function and reduce the risk of receiving external attacks.
You can disable all REST APIs and you can partially disable them.
(This feature will be removed in version 2.1.)

These features will be able to choose whether or not to enable.

This plug-in does not change the .htaccess
You can use with confidence.
Also it works in both Apache and nginx.

(photo by Keoni Cabral https://www.flickr.com/photos/keoni101/)