內容簡介
SecureFusion 是一款針對 WordPress 網站管理員、開發者及代理商設計的輕量級安全防護外掛，提供強大的防火牆和即時監控功能，有效防止暴力破解攻擊、惡意注入及自動化流量，確保網站運行快速且安全。
【主要功能】
• 登入保護與互動監控
• 防火牆與主動防護
• XML-RPC 防護
• 強制 SSL / HTTPS
• 評論 IP 封鎖與批量防護
• IP 偽裝防止與成功登入追蹤
外掛標籤
開發者團隊
② 後台搜尋「SecureFusion – Security and Firewall by Fyndsoft」→ 直接安裝（推薦）
📦 歷史版本下載
原文外掛簡介
Are you tired of bloated security plugins that slow down your website and clutter your database?
SecureFusion is designed for WordPress site administrators, developers, and agency owners who demand lightweight, robust, and performance-optimized protection. It acts as an active shield against brute-force attacks, remote XML-RPC exploits, and malicious injections, while keeping your loading speeds lightning fast.
SecureFusion helps you enforce strict Content Security Policies (CSP), hide standard administrative entry points, block automated traffic clusters, track successful/failed logins, block spam comment IPs directly, and monitor unauthorized access patterns via a clean, modern dashboard.
Features
1. Login Protection & Interactive Monitoring
Failed Login Attempts Log: Visually tracks unauthorized login attempts, displaying timestamps, IP addresses, and lockouts.
IP Range Clustering (/24 Subnets): Groups attacking IPs into standard /24 subnets. Admins can view individual subnet IPs and copy the CIDR lists to a firewall or Cloudflare blacklist.
Custom Login URL: Obfuscates wp-login.php and wp-admin access by changing it to a secret URL, stopping automated bots instantly.
Brute-Force Lockout: Restricts login attempts and locks out offending IPs.
Modify Login Errors: Alters generic authentication errors so hackers cannot verify whether they got the username or password correct.
2. Firewall & Active Guard
Filter Bad Requests: Screens URL requests to block XSS, CSRF, and code injection attempts before they reach your theme or database.
REST API Control: Restricts public endpoint scraping, preventing attackers from harvesting user lists or plugin info.
Content Security Policy (CSP): Easily configure and inject headers to control script, style, and media execution sources in the client browser.
3. XML-RPC Shield
DDoS Amplification Defense: Fully disable XML-RPC, or selectively disable pingbacks, preventing your server from participating in DDoS botnets.
XML-RPC Login Protection: Specifically blocks remote credentials verification through XML-RPC.
4. Enforced SSL / HTTPS
Secure Protocol Redirection: Forces HTTP to HTTPS redirection across admin screens, login pages, or the entire site to guarantee secure data transmission.
5. Comments IP Blocking & Bulk Shield
Individual Commenter IP Blocking: Block or unblock comment author IP addresses directly from the WordPress Comments list page.
Bulk Spam IP Blocking: Instantly block all IP addresses associated with spam comments currently in the Spam directory.
Smart CIDR Range Calculation: Option to block entire /24 IPv4 subnets or /64 IPv6 ranges of spam comments automatically based on IP distribution to stop persistent spam networks.
6. IP Spoofing Prevention & Successful Login Tracking
Successful Login Logging: Tracks successful logins to audit administrator and user access alongside failed login attempts.
IP Spoofing Prevention: Performs strict public vs. private IP checks on client headers (like HTTP_X_FORWARDED_FOR) to prevent attackers from spoofing their IP addresses when behind load balancers or proxies.
For complete information, please visit our website the SecureFusion website.
Credits
This plugin bundles and/or utilizes the following third-party libraries:
Chart.js (v4.5.1)
License: MIT
License URI: https://github.com/chartjs/Chart.js/blob/master/LICENSE.md
Source: https://www.chartjs.org
persist-admin-notices-dismissal
License: GPLv3
Source: https://github.com/collizo4sky/persist-admin-notices-dismissal
wasp
License: GPLv3
Source: https://github.com/uuur86/wasp
