What to do if your WordPress site has been hacked
Immediately change passwords. Your WordPress user account and all accounts with administrative privileges on the website. The MySQL password for your website database and the password for MySQL server administrator. FTP too, if it is enabled. Reinstall WordPress. Manually remove old one and install again (do not forget to make backup of [...]
Recommended security settings for WP Cerber
We provide you with settings based on best security practices. This settings suitable for most of the WordPress powered sites in the Internet. See screenshot below to see how it’s easy. Limit login attempts Attempts 3 allowed retries in 60 minutes Lockout duration 60 minutes Aggressive lockout Increase lockout duration to 24 hours [...]
Custom login page for WordPress
The custom login page feature is a great tool for reducing the attack surface and eliminating spam registrations. It’s the first thing you should enable on a newly installed WordPress. Another highly recommended security measure is renaming WordPress’s plugins folder. Why it matters and why it works According to our studies [...]
WP Cerber Security 1.4
Added support Multisite mode. Added Number of comments column on the Users screen in dashboard. Updated notification settings. Updated languages files. Help What is RID and how to use it WordPress Security Managing WordPress application passwords a hassle-free way WordPress Security WP Cerber Bug Bounty Program WordPress Security How to [...]
WP Cerber Security 1.3
Fix issue with hanging up during redirect to /wp-admin/ on some circumstance. Fix minor issue with limit login attempts for non-admin users. Add Date of registration column on the Users screen in dashboard. Some UI improvements on access-list screen. Performance optimization & code refactoring. WordPress Security Managing WordPress [...]
How to hide wp-admin and wp-login.php from attacks
With WP Cerber Security you can do that with several clicks. Open WP Cerber main settings page. Turn on Disable automatic redirection to the login page when /wp-admin/ is requested by an unauthorized request Enter your desired custom login URL into the Custom login URL field Turn on Block direct access to wp-login.php and return HTTP 404 [...]
Migrating from Limit Login Attempts
If you have Limit Login Attempts is installed and now ready to switch more reliable and powerful solutions like WP Cerber you can do it in several clicks.
WP Cerber Security 1.2
Add localization & internationalization files. You can use Loco Translate plugin to make your own translation. Add Russian translation. Add headers for failed attempts to use such headers with fail2ban. WordPress Security WP Cerber Bug Bounty Program WordPress Security How to limit the number of concurrent user sessions in WordPress [...]
WP Cerber Security 1.1
Add ability to filter out Activity List by IP, username or particular event. You can see what happens and when it happened with particular IP or username. When IP reaches limit login attempts and when it was blocked. Add protection from adding to the Black IP Access List subnet belongs to current user’s session IP. Add option to [...]
Alternative to Limit Login Attempts plugin?
WP Cerber is the best possible alternative and drop in replacement for Limit Login Attempts plugin with a bunch of security features
WP Cerber Security 1.0
This brand new plugin inspired by Limit Login Attempts plugin. That was useful plugin. It worked fine for many of my client's sites for years. But now Limit Login Attempts is obsolete. Welcome WP Cerber!