WeSecure v1.0.1

WeSecure v1.0.1

What's New

• GitHub Auto-Updater — Plugin now checks for updates from this repo automatically
• XML-RPC Block — Completely disables xmlrpc.php to prevent brute force amplification
• Update notifications appear in WordPress admin like regular plugins
• One-click update directly from wp-admin → Plugins

All Features

• XSS Protection
• File Injection Protection
• Core File Integrity Monitor
• .htaccess Protection
• REST API User Enumeration Block
• XML-RPC Block
• Login Brute Force Protection (5 attempts → 15 min lockout)
• Hide WP Version & Server Info
• Security Headers
• File Editor Disabled
• Block PHP in Uploads
• Password Strength Enforcement
• GitHub Auto-Update ← NEW

Installation

1. Download wesecure-v1.0.1.zip
2. WordPress admin → Plugins → Add New → Upload Plugin
3. Upload zip → Activate
4. Future updates will appear automatically!

WeSecure v1.0.0

WeSecure v1.0.0 - WordPress Security Plugin

Author: Sravan M

Features

• XSS Protection — Blocks cross-site scripting in all inputs
• File Injection Protection — Blocks path traversal & PHP wrapper attacks
• Core File Integrity Monitor — Detects changes to index.php, wp-config.php, etc.
• .htaccess Protection — Monitors & locks .htaccess from malicious edits
• REST API User Protection — Blocks username enumeration via /wp-json/wp/v2/users
• XML-RPC Block — Disables xmlrpc.php (prevents brute force amplification & DDoS)
• Login Brute Force Protection — Locks out IP after 5 failed attempts
• Hide WP Version & Server Info — Removes PHP version, WP version, server headers
• Security Headers — Adds X-XSS-Protection, CSP, X-Frame-Options
• File Editor Disabled — Blocks WP theme/plugin editor
• Block PHP in Uploads — Prevents PHP execution in /uploads/
• Password Strength Enforcement — Requires strong passwords (12+ chars, mixed)

Bonus

• check.py — Python security audit script to test your own WordPress site

Installation

1. Download wesecure.php
2. Create folder wp-content/plugins/wesecure/
3. Place wesecure.php inside
4. Activate from WordPress admin → Plugins
5. Configure settings at WeSecure dashboard

All protections enabled by default with toggle checkboxes.