v1.0.7 — Wordfence 2FA coverage reporting

Adds Wordfence 2FA coverage to the daily plugin report so the backend can flag sites where admin-capable users are not protected by two-factor authentication.

Details

• Detects the wordfence and wordfence-login-security plugins.
• Counts users with the edit_posts capability (administrators, editors, authors, contributors) and, of those, how many have no 2FA enrolment — broken down
  per role.
• No personal user data (id, email, login, display name) is transmitted; only aggregate counts per role.
• Wordfence block is null on sites where neither plugin is installed, so existing payload consumers are unaffected.

Payload addition

"wordfence": {
  "installed": true,
  "active": true,
  "table_exists": true,
  "eligible_user_count": 5,
  "users_without_2fa_by_role": { "administrator": 1, "editor": 2 }
}