
內容簡介
WP Guardian 是一款簡單的 WordPress 外掛,提供實用的安全防護和檢查功能。它能夠保持一組本地保護措施,並協助用戶識別需要從主機或 CDN 請求的高影響力加固措施。
【主要功能】
• 檢查 PHP 版本及其安全支援結束日期
• 評估匿名訪客可讀的 API 端點
• 檢查 REST API 的用戶枚舉問題
• 評估管理員持有的應用密碼
• 檢查 XML-RPC 是否可達
• 提供常見安全標頭的檢查
外掛標籤
開發者團隊
② 後台搜尋「WP Guardian – Security Hardening Checklist & Lightweight Firewall」→ 直接安裝(推薦)
原文外掛簡介
WP Guardian is a simple plugin for practical WordPress safeguards and security checks. It keeps a small set of local protections and helps you identify the higher-impact hardening to request from your host or CDN.
The Hardening Checklist on the Assessment screen checks:
PHP version and its security support end date
Abilities API endpoints that anonymous visitors can read
User enumeration through the REST API and ?author= URLs
Application passwords held by administrators
Whether XML-RPC is reachable
Common security headers (HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame protection)
Installed plugins that were closed on WordPress.org
Security Measures include Nginx and Caddy equivalents of the Apache rules.
About
WP Guardian keeps WordPress file restrictions, Apache-compatible directory hardening, an optional nG .htaccess firewall, and environment audits in one straightforward place. Its Security Assessment explains where a managed CDN or host should provide rate limiting, bot protection, and DDoS mitigation.
Explore more WordPress Plugins.
From the same author
Active Contacts – WordPress CRM & Follow-up Plugin
LazyClone – Copy a WordPress Site Without FTP
Lighthouse – WordPress Performance & Speed Optimization Plugin
Active Analytics – Privacy-Friendly WordPress Analytics Plugin
ImagePress – WordPress Image Gallery & Community Photo Plugin
eCards – WordPress eCard Plugin with Email Designer
Repeater for Gravity Forms – Repeater Field Add-on
Fixtures & Results – WordPress Sports League & GAA Club Plugin
WP Google Consent Platform (GCP)
