WordPress Firewall

This WordPress plugin investigates web requests with simple WordPress-specific heuristics to identify and stop most obvious attacks. There exist a few

Author:SEO Egghead, Inc. (profile at wordpress.org)
WordPress version required:2.6.1
WordPress version tested:2.8
Plugin version:1.25 for W
Added to WordPress repository:12-08-2009
Last updated:12-08-2009
Warning! This plugin has not been updated in over 2 years. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.
Rating, %:100
Rated by:4
Plugin URI:http://www.seoegghead.com/software/wordpress-...
Total downloads:36 055
Active installs:6 000+
plugin download
Click to start download

This WordPress plugin investigates web requests with simple WordPress-specific heuristics to identify and stop most obvious attacks. There exist a few powerful generic modules that do this; but they're not always installed on web servers, and difficult to configure.

It intelligently whitelists and blacklists pathological-looking phrases based on which field they appear within in a page request (unknown/numeric parameters vs. known post bodies, comment bodies, etc.). Its purpose is not to replace prompt and responsible upgrading, but rather to mitigate 0-day attacks and let bloggers sleep better at night.

See: WordPress Firewall Info and WordPress Firewall Security Filters for more information.