Overview
WP Defender PRO is an all-in-one WordPress security plugin designed to help protect websites against common attacks, unauthorized file changes and other security issues. It combines login protection, security auditing, file integrity monitoring and firewall controls in one modular solution.
The plugin provides a login shield with configurable attempt limits, IP blocking, custom login URLs and whitelist support. Its 25-point security scanner checks important WordPress security areas and provides recommendations, with scheduled scanning and automatic fixes available for selected issues.
WP Defender PRO also monitors important WordPress files using SHA256 comparisons and looks for potentially dangerous code patterns and webshells. Its firewall helps detect and block SQL injection, XSS and command injection attempts, while also filtering malicious user agents.
A visual security dashboard provides security scores, attack statistics, active threat information and activity logs. The plugin also supports configurable HTML email alerts and report exports, giving administrators additional visibility into the security status of their WordPress website.
Features
- Login shield with configurable maximum login attempts
- IP blocking with customizable blocking duration
- Custom WordPress login URL capability
- IP whitelist functionality
- Real-time login monitoring
- 25-point WordPress security scanning
- Automatic fixes for selected security issues
- Hourly, daily and weekly scheduled scans
- Detailed security recommendations
- File integrity monitoring with SHA256 hash comparison
- Webshell and potentially dangerous code detection
- False-positive marking system
- File quarantine with backup support
- Monitoring for uploads, themes, plugins and WordPress core directories
- SQL injection detection and blocking
- XSS attack prevention
- Command injection protection
- Malicious user-agent blocking
- Custom firewall block page
- Automatic IP blocking after repeated attempts
- HTML email security alerts
- Severity-based notification settings
- Security dashboard with score and real-time statistics
- 7-day attack counter
- Active threat monitoring and recent activity logs
- CSV export capability
- JSON settings import and export
- Setup wizard with basic and advanced presets
Requirements
- WordPress 6.0 or newer
- PHP 8.0 or newer
- WordPress-compatible hosting environment
- Bootstrap 5 UI framework
- Chart.js for security visualizations
- Modern WordPress installation with standard security capabilities enabled
| Category | Scripts & Code / PHP Scripts / Security |
| First release | 06 October 2026 |
| Last update | 06 October 2026 |
| Files included | Documentation |
| Tags | wordpress security , security plugin , wordpress firewall , malware scanner , login security , file integrity , waf , brute force , ip blocking , security audit , wordpress protection , security alerts , php plugin |




