SiteGuard WP Plugin

What the author says it does

SiteGuard WP Plugin helps protect WordPress sites by strengthening login and admin-area security. It helps reduce brute-force login attacks, password list attacks, comment spam, and unauthorized access to /wp-admin/.

Main Features

• Admin Page IP Filter: Restricts wp-admin access to IP addresses that have successfully logged in.
• Rename Login: Changes the URL of the login page from wp-login.php to a custom path.
• CAPTCHA: Adds CAPTCHA to login, comment, password reset, and user registration forms.
• Login Lock: Temporarily locks out IP addresses after repeated failed login attempts.
• Login Alert: Sends email notifications when users log in.
• Fail Once: Intentionally rejects the first valid login attempt and requires the user to try again shortly after.
• Protect XML-RPC: Disables pingbacks or all XML-RPC access to help prevent abuse.
• Block Author Query: Helps prevent username leakage through /?author=<number> requests.
• Update Notifications: Sends email notifications when updates are available for WordPress core, plugins, or themes.
• WAF Tuning Support: Creates exclusion rules to help prevent false positives when SiteGuard Server Edition WAF is installed.

Requirements and Compatibility

• WordPress multisite is not supported.
• Apache 1.3, Apache 2.x, and Nginx are supported.

The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.

Latest changelog entry

1.8.10

• Login Lock: fixed the lock never engaging when the WordPress time zone was behind the database server’s time zone (for example, WordPress set to UTC and MySQL to JST).
• Admin Page IP Filter: fixed the 24-hour allow period becoming shorter or longer when the WordPress and database time zones differ. Times are now compared in the WordPress time zone throughout.

Special thanks to hypeinai for the time zone report.