WP Cerber Security 2.9
What is new? Added ability to check and block prohibited usernames (logins). You can specify list of usernames (logins) on a new settings tab called Users. The plugin will immediately block any attempt to log in and will lock out any IP address have tried to use those logins. It’s recommended to have at least following [...]
WP Cerber Security 2.7.2
Small issues in the plugin were fixed Fixed bug for non-English WordPress configuration: the plugin is unable to block IP in some server environment. If you have configured language other than English you have to install this release. Fixed two small bugs related to 1) unable to remove IP subnet from the Access Lists and 2) getting IP [...]
Turn your WordPress into Fort Knox
This article assumes that we want to get a bulletproof protected website powered by WordPress. It’s not necessarily to do all the following steps word for word and point by point exactly as described. But I do recommend that if you want to create your own Fort Knox. WordPress Security Custom login page for WordPress [...]
Limit login attempts without a plugin?
You can find plenty of comments and advice on that on the Internet. But is it real? WordPress Security How to limit the number of concurrent user sessions in WordPress WordPress Security Managing WordPress application passwords a hassle-free way Help What is RID and how to use it WordPress Security WP Cerber Bug Bounty Program
WP Cerber Security 2.7
What’s new in the most powerful and flexible solution to mitigate brute force attacks and hardening WordPress New: Now you can easily view extra WHOIS information for IP addresses in the activity log including country, network info, abuse contact, etc. New: Added ability to disable WordPress REST API, see Hardening WordPress New: [...]
Hardening WordPress with WP Cerber
All suggested settings are highly recommended for most websites on the Internet. If you need, for some reason, provide access to the functions and features listed on this page from a particular computer or an IP network, you need to add them to the White IP Access List. Disable REST API The plugin restricts access to the [...]
Know more about intruder’s IP
To enable retrieving, check option: Drill down IP. To view the information click on a particular IP address on the Activity tab. Technical details To get extra information like country, company, network info and abuse contact WP Cerber uses requests to a limited set of external WHOIS servers which are maintained by appropriate [...]
WP Cerber Security 2.0.1.6
What’s new in the best plugin to mitigate brute force attacks and hardening WordPress Important Note: This release brings a lot of changes to the code – let me know if something goes wrong via support form. You can roll back to the last stable version here: Downloads. New: Added Reason column on the Lockouts screen which will [...]
Plugin Inspector
Want to know more about plugins you have installed on your blog? The Plugin Inspector plugin is an easy way to check plugins installed on your WordPress and make sure that plugins do not use deprecated WordPress functions and some unsafe functions like eval, base64_decode, system, exec, etc. Some of those functions may be used [...]
WP Cerber Security 1.8
What’s new in the best plugin to mitigate brute force attacks and hardening WordPress New! added Hostname column for the User Activity and Lockouts tabs. New! added ability to write all failed login attempts to the specified file or to the syslog file. Use it to protect site with fail2ban. Note: you need root access to the server to [...]
How to protect WordPress with Fail2Ban
By using WP Cerber Security and Fail2Ban together you can reinforce protection at the most effective level. That allows you to protect a WordPress from brute-force and DoS attacks at the OS level with iptables. Read more about attacks: Brute-force, DoS, and DDoS attacks – what’s the difference? Note: you have to have the root [...]
WP Cerber Security 1.7
Added ability to remove old records from the user activity log automatically. Check out Keep records for field on the settings page. This setting determines how many days’ WP Cerber will keep log records. Log will be cleaned up automatically on a schedule. Added pagination for the User Activity and the Lockouts screens. Added ability to [...]
Hardening WordPress with WP Cerber and NGINX
NGINX is a free, open-source, high-performance HTTP server. WP Cerber is a free, open-source, security plugin which protects WordPress powered sites from intruders and hackers. How to hardening WordPress using WP Cerber and NGINX together First of all, you need to set up a Custom login URL and check Block direct access to [...]
WP Cerber Security 1.6
New: beautiful widget for the dashboard to keep an eye on things. Get quick analytic with trends over 24 hours and ability to manually deactivate Citadel mode. French translation added, thanks to hardesfred. Hardening WordPress. Removed automatically redirection from /login/ to the login page, from /admin/ and /dashboard/ to the [...]
How to find hidden login page on WordPress
Let’s assume you’ve decided to hide your WordPress login page and wp-admin dashboard from hackers by hiding these pages with a simple plugin or a trick. Do you think it works and nobody knows your secrets? Don’t be so naive. Anyone can easily find out login and dashboard pages with the following simple tricks. [...]