Follow for free plugins, new theme releases and theme news
Plugin Description
SECURE shows you exactly how to lock down your WordPress sites.
Everyday new security risks are found and hackers are ready to use them against your websites.
We at SEC Consult have a dedicated team in multiple time zones that tracks all security risks and makes them available to you in real-time.
The pro version of SECURE comes with the following unique benefits:
- You’ll receive an e-mail alert as soon as vulnerabilities are identified that affect any of your sites.
- The vulnerability alerts will tell you exactly how to address the vulnerability and become safe again.
- You’ll receive weekly status mails informing you about outdated versions and vulnerabilities in your sites.
The free version of SECURE identifies the following security issues and more:
- Outdated Plugins, Themes and WordPress itself
- Known security issues in installed Plugins, Themes and WordPress itself (information is 30 days old)
- User accounts with weak passwords
- Files that might leak information to attackers
- Insecure file permissions for important core files
- Unencrypted communication with the WordPress admin interface
- Directory listings are enabled
- The upload of dangerous file types is allowed
- Debugging is enabled
- User Registration is enabled
- WordPress file editing is enabled
- Default database prefix is used
- Root database user is used
- Dangerous PHP functions are enabled
- Multiple issues with error reporting that might leak information to attackers
- PHP leaking version information
Screenshots
-
The start page of the plugin gives you an immediate overview of the security issues of your site.
-
The update check step shows you which plugins are either outdated (orange icon) or have a known security issue (red icon) that hackers can abuse to attack your site. For non-subscribed users the security issue information is 30 days outdated.
-
Clicking on the arrow symbol of any issue shows detailed information about it. In this case details of a vulnerability in an installed plugin are displayed. This functionality is only available to subscribed users.
-
The user check step displays information about user accounts that might pose a threat to your website. For example weak passwords or common usernames with high privileges will be flagged here.
-
Detailed information on how to solve a problem with a specific user account is given.
-
The core check step shows which files and settings might put your website at risk and are configured insecurely.
-
One example of a violation of security best practices that should be resolved.
-
Subscribed users conveniently receive weekly status e-mails for all their active sites summarizing available updates and known vulnerabilities.
-
A detailed report about the critcal issue that affects a site is attached in the real-time e-mail alert for subscribed users.
