Skip to content

WeSecure v1.0.0

Choose a tag to compare

View all tags
@sravan-dev sravan-dev released this 31 May 10:23
· 5 commits to master since this release
v1.0.0
8b81024

WeSecure v1.0.0 - WordPress Security Plugin

Author: Sravan M

Features

  • XSS Protection — Blocks cross-site scripting in all inputs
  • File Injection Protection — Blocks path traversal & PHP wrapper attacks
  • Core File Integrity Monitor — Detects changes to index.php, wp-config.php, etc.
  • .htaccess Protection — Monitors & locks .htaccess from malicious edits
  • REST API User Protection — Blocks username enumeration via /wp-json/wp/v2/users
  • XML-RPC Block — Disables xmlrpc.php (prevents brute force amplification & DDoS)
  • Login Brute Force Protection — Locks out IP after 5 failed attempts
  • Hide WP Version & Server Info — Removes PHP version, WP version, server headers
  • Security Headers — Adds X-XSS-Protection, CSP, X-Frame-Options
  • File Editor Disabled — Blocks WP theme/plugin editor
  • Block PHP in Uploads — Prevents PHP execution in /uploads/
  • Password Strength Enforcement — Requires strong passwords (12+ chars, mixed)

Bonus

  • check.py — Python security audit script to test your own WordPress site

Installation

  1. Download wesecure.php
  2. Create folder wp-content/plugins/wesecure/
  3. Place wesecure.php inside
  4. Activate from WordPress admin → Plugins
  5. Configure settings at WeSecure dashboard

All protections enabled by default with toggle checkboxes.

Assets 4
Loading