Adds explicit WPlura legal, help, contact, and disclosure resource labels for WordPress.org release compliance.<\/p>","0.1.1":"
Adds free-owned extension slots so Security Center Pro can extend the local admin experience without replacing the free plugin shell.<\/p>","0.1.0":"
Initial public release of Web Plura Security Center with free local checks and WordPress-native security workflows.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3669857,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3669857,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3669857,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3669857,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.1.10","0.1.11"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3669857,"resolution":"1","location":"assets","locale":"","width":1440,"height":4696},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3669857,"resolution":"2","location":"assets","locale":"","width":1440,"height":11216},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3669857,"resolution":"3","location":"assets","locale":"","width":1440,"height":8239},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3669857,"resolution":"4","location":"assets","locale":"","width":1440,"height":2257},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3669857,"resolution":"5","location":"assets","locale":"","width":1440,"height":2023},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3669857,"resolution":"6","location":"assets","locale":"","width":1440,"height":9206},"screenshot-7.png":{"filename":"screenshot-7.png","revision":3669857,"resolution":"7","location":"assets","locale":"","width":1440,"height":2851},"screenshot-8.png":{"filename":"screenshot-8.png","revision":3669857,"resolution":"8","location":"assets","locale":"","width":1440,"height":3288}},"screenshots":{"1":"Security dashboard showing local protection status, scan context, and recommended review actions.","2":"Security Center setup guidance with checklist, score, and file-change baseline context.","3":"Security scanner page for local quick and full scans.","4":"Additional security advisor reviewing form, SMTP, update, and privacy-page signals.","5":"Security findings view with context and suggested review actions.","6":"Firewall controls for rate limiting, temporary blocking, and local request protection.","7":"User profile login-security controls for supported 2FA, passkeys, and backup codes.","8":"Settings for local security modules, notifications, SMTP delivery, and privacy controls."}},"plugin_section":[],"plugin_tags":[1174,1229,55021,600,1909],"plugin_category":[54],"plugin_contributors":[266029],"plugin_business_model":[],"class_list":["post-355610","plugin","type-plugin","status-publish","hentry","plugin_tags-firewall","plugin_tags-login-security","plugin_tags-malware-scanner","plugin_tags-security","plugin_tags-two-factor-authentication","plugin_category-security-and-spam-protection","plugin_contributors-wplura","plugin_committers-wplura"],"banners":{"banner":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/banner-772x250.png?rev=3669857","banner_2x":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/banner-1544x500.png?rev=3669857","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/icon-128x128.png?rev=3669857","icon_2x":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/icon-256x256.png?rev=3669857","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-1.png?rev=3669857","caption":"Security dashboard showing local protection status, scan context, and recommended review actions."},{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-2.png?rev=3669857","caption":"Security Center setup guidance with checklist, score, and file-change baseline context."},{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-3.png?rev=3669857","caption":"Security scanner page for local quick and full scans."},{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-4.png?rev=3669857","caption":"Additional security advisor reviewing form, SMTP, update, and privacy-page signals."},{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-5.png?rev=3669857","caption":"Security findings view with context and suggested review actions."},{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-6.png?rev=3669857","caption":"Firewall controls for rate limiting, temporary blocking, and local request protection."},{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-7.png?rev=3669857","caption":"User profile login-security controls for supported 2FA, passkeys, and backup codes."},{"src":"https:\/\/ps.w.org\/web-plura-security-center\/assets\/screenshot-8.png?rev=3669857","caption":"Settings for local security modules, notifications, SMTP delivery, and privacy controls."}],"raw_content":"\n
Web Plura Security Center helps WordPress administrators investigate suspicious files, review security risks, strengthen login protection, monitor important file changes, and manage local firewall and hardening controls from the WordPress dashboard.<\/p>\n\n
The free WordPress.org plugin is built around local security work. Security scans, login protection, firewall\/rate-limiting controls, file-change review, hardening checks, reports, notifications, and privacy tools can be used without a Web Plura Cloud account, separate extension, subscription, license, or hosted service.<\/p>\n\n
Use it when you need a practical security review inside WordPress: scan for suspicious files and malware indicators, check risky configuration, review administrator and file-integrity signals, configure supported 2FA\/passkey login controls, and manage local request protection. Findings are advisory signals for investigation, not proof that every flagged item is malicious.<\/p>\n\n
Run local security scans to review suspicious files, malware indicators, risky configuration, and other findings that may need administrator attention.<\/p>\n\n
The scanner is designed to support investigation. It does not automatically treat every unusual file as malware, and administrators should review scan evidence before taking destructive action.<\/p>\n\n
Unexpected files or file changes can sometimes indicate a compromised WordPress installation, but legitimate plugin updates, theme updates, administrators, hosting tools, and deployment processes can also modify files.<\/p>\n\n
Web Plura Security Center can help identify files and patterns that may require review. It does not claim to detect every compromise, confirm that every suspicious file is malicious, or fully clean hacked WordPress sites automatically.<\/p>\n\n
Account security is a common weak point on WordPress sites. Web Plura Security Center includes supported login-security controls such as:<\/p>\n\n
These controls can reduce risk from reused passwords, repeated login attempts, and account-access problems. They do not guarantee account security.<\/p>\n\n
Web Plura Security Center includes local firewall controls designed to reduce repeated or abusive requests.<\/p>\n\n
Supported protections include request inspection, endpoint rate limiting, temporary blocking, local allowlist\/blocklist controls, and firewall audit events. These tools keep request protection under administrator control and can be disabled temporarily for troubleshooting.<\/p>\n\n
Web Plura Security Center keeps local file-change and integrity context to help administrators review important changes.<\/p>\n\n
A changed file does not automatically mean a website has been compromised. File-change and baseline information is meant to help administrators compare expected changes, such as updates or deployments, with changes that deserve closer review.<\/p>\n\n
Where supported, administrators can run checksum verification against the WordPress.org Plugin Checksums API.<\/p>\n\n
This can help identify differences between supported installed plugin files and the files expected for a known WordPress.org plugin release. Checksum verification is an integrity check, not guaranteed malware detection.<\/p>\n\n
Web Plura Security Center includes local checks and controls that help administrators review common WordPress exposure points.<\/p>\n\n
Supported areas include security headers, XML-RPC exposure, API exposure notes, debug-log exposure, file permissions, executable files in uploads, public backup\/archive indicators, file editor exposure, administrator\/user risk, and update posture.<\/p>\n\n
These checks are intended to provide practical review context. They should be used with secure hosting, regular updates, strong credentials, reliable backups, and careful administrator review.<\/p>\n\n
The Admin\/User Risk & File Integrity advisor reviews supported security conditions such as:<\/p>\n\n
These checks are advisory and read-only. They do not silently modify users, roles, files, or approved baselines.<\/p>\n\n
Web Plura Security Center provides security findings, incident visibility, local reports, security history, and administrative guidance for supported local checks.<\/p>\n\n
Findings are intended to provide enough context for an administrator to decide what deserves investigation. Not every warning is a confirmed security breach.<\/p>\n\n
Where configured and supported by the current release, administrators can receive security-related email notifications.<\/p>\n\n
The free plugin does not claim SMS, push notifications, external monitoring, or continuous cloud monitoring.<\/p>\n\n
Web Plura Security Center also includes secondary local advisors that can help administrators review related risk signals.<\/p>\n\n
The Form Abuse & Lead Security advisor reviews supported local signals involving installed form plugins, likely lead pages, SMTP configuration, update status, privacy-page configuration, and risky form markers.<\/p>\n\n
These checks run locally according to the current plugin implementation. The advisor does not submit forms, capture leads for external analysis, analyze private lead content externally, or upload lead data to Web Plura.<\/p>\n\n
Web Plura Security Center can be useful when you need to:<\/p>\n\n
The WordPress.org version is designed so that its included local security functionality can operate without requiring a Web Plura Cloud account.<\/p>\n\n
Local security functionality should be understood as local WordPress-site functionality. The free plugin stores plugin-owned security metadata in the site's WordPress database, including local settings, contact or notification email settings when configured, login-security metadata, audit events, hashed or prefix IP evidence, blocked IP records, file-baseline summaries, and local report or scan state.<\/p>\n\n
The free plugin does not automatically upload suspicious file samples, form-advisor data, administrator\/user-risk data, file-baseline history, setup-checklist information, or local security reports to Web Plura Cloud.<\/p>\n\n
The plugin registers applicable WordPress Privacy Tools exporter and eraser callbacks for plugin-owned security metadata. Uninstall removes applicable plugin options, scheduled hooks, and plugin-owned custom database tables.<\/p>\n\n
No WordPress security plugin can guarantee that every attack, malicious file, compromised account, vulnerability, or intrusion will always be detected.<\/p>\n\n
Web Plura Security Center provides security checks and administrative tools intended to help site owners identify and investigate supported security risks. Administrators should maintain secure hosting, strong credentials, current WordPress core, plugins and themes, reliable backups, and other appropriate security practices.<\/p>\n\n
Suspicious-file findings, checksum differences, file-change signals, administrator warnings, and hardening checks should be reviewed before action is taken. A finding indicates something worth reviewing; it does not automatically prove that the site has been compromised.<\/p>\n\n
Backup, restore, and disaster recovery workflows are handled by the standalone Web Plura Backup & Restore Manager plugin.<\/p>\n\n
The WordPress.org package is fully functional for its included local security checks, login protection, firewall controls, file-integrity context, incident visibility, reports, administrator guidance, privacy tools, and plugin-owned data controls.<\/p>\n\n
Separately installed or hosted Web Plura services may provide additional account-backed services, hosted operations, or cross-site workflows.<\/p>\n\n
Those services are not required for the local functionality included in this WordPress.org plugin.<\/p>\n\n
The free plugin does not require Pro, Web Plura Cloud, account login, subscription, license, entitlement, checkout, or a hosted service for its included local controls.<\/p>\n\n
This free plugin does not connect to Web Plura Cloud. It may contact these third-party services only when an administrator enables or runs the related local feature:<\/p>\n\n
Administrator consent is required before optional CAPTCHA checks or checksum verification checks use those external services.<\/p>\n\n
Suspicious files, advisor data, admin\/user risk data, file baselines, and setup checklist data are not uploaded by the free plugin.<\/p>\n\n
No third-party executable PHP\/JS code is loaded except administrator-enabled CAPTCHA provider scripts. Plugin\/theme updates are not served from non-WordPress.org channels.<\/p>\n\n
Some payment, social, CDN, or static-hosting domains may appear in local scanner allowlists for false-positive reduction. They are detection references only and are not enqueued or executed by the free plugin.<\/p>\n\n
No. The included local security checks and core local administration workflows work without a Web Plura Cloud account.<\/p><\/dd>\n
Yes. The plugin includes local scanning for suspicious files, malware indicators, risky configuration, and supported security risks. Findings are intended to help administrators identify items that need investigation.<\/p><\/dd>\n
It can scan for suspicious files and malware indicators, but automated scanning cannot guarantee detection of every possible compromise. A finding should be reviewed as a security signal, not treated as automatic proof of malware.<\/p><\/dd>\n
The plugin can identify supported security signals such as suspicious files, malware indicators, unexpected file changes, and risky configuration. These findings may help investigate a suspected compromise, but a scan result alone cannot guarantee whether every intrusion has or has not occurred.<\/p><\/dd>\n
Yes. The plugin keeps local file-change and baseline context to help administrators review important changes. A changed file does not automatically mean the site has been compromised.<\/p><\/dd>\n
Yes. The plugin includes supported local firewall controls such as request inspection, rate limiting, temporary blocking, and local allowlist\/blocklist controls.<\/p><\/dd>\n
Yes. The plugin includes supported login-protection controls such as request rate limiting, temporary blocking, 2FA, passkeys, backup codes, and optional CAPTCHA protection.<\/p><\/dd>\n
Yes. Supported users can configure two-factor authentication, and passkey availability can depend on the browser, device, site configuration, and supported plugin implementation. Backup codes can be used where supported as a recovery method.<\/p><\/dd>\n
No. Security findings should be reviewed before potentially destructive actions are taken. The plugin provides findings and supported remediation context so administrators can investigate before acting.<\/p><\/dd>\n
No. Suspicious file sample upload is not part of the free local plugin.<\/p><\/dd>\n
Where supported, administrators can run checksum verification against the WordPress.org Plugin Checksums API. This is an integrity check and does not guarantee malware detection.<\/p><\/dd>\n
Yes. Supported hardening and admin\/user risk checks include file permission signals, executable files in upload locations, debug-log exposure, public archive indicators, security headers, XML-RPC exposure, and recent component changes.<\/p><\/dd>\n
No. The advisor performs supported local checks and does not submit forms or upload collected lead content to Web Plura.<\/p><\/dd>\n
No. The advisor is read-only and does not silently modify users, roles, files, or approved baselines.<\/p><\/dd>\n
The free plugin does not send site security data to Web Plura Cloud by default. Optional external services may receive limited data only when the related feature is enabled or run by an administrator, such as checksum lookup requests to WordPress.org or CAPTCHA requests to the selected CAPTCHA provider.<\/p><\/dd>\n
The free plugin stores plugin-owned security metadata locally in WordPress. Depending on configuration and site activity, this may include contact or notification email settings, login-security metadata, audit events, hashed or prefix IP evidence, blocked IP records, file-baseline summaries, and local settings or report state.<\/p>\n\n
The free plugin does not send site security data to Web Plura Cloud by default. If an administrator enables a CAPTCHA provider, that provider may receive browser request metadata, a CAPTCHA verification token, and the requester IP address as described in the External Services section.<\/p><\/dd>\n
Yes. The plugin registers applicable WordPress Privacy Tools exporter and eraser callbacks for plugin-owned security metadata.<\/p><\/dd>\n
Yes. Uninstall removes applicable plugin options, scheduled hooks, and plugin-owned custom database tables.<\/p><\/dd>\n\n<\/dl>\n\n\n
Kept Free issue fixes, remediation-plan execution, and emergency action controls independent from Web Plura Cloud, Pro, subscription, and entitlement checks.<\/p>\n\n
Renamed the public display title, added local-only integrity baselines, tightened nonce\/passkey handling, expanded external-service disclosure, downgraded unsafe filesystem cleanup to manual guidance, and removed unused public key files.<\/p>\n\n
Improved external-service consent wording, Upgrade page presentation, and dormant cloud-service wording.<\/p>\n\n
Added a Free-owned local scan evidence resolver so Free and Pro share canonical scanner report, summary, timestamp, and score fallback behavior.<\/p>\n\n
Added a Free-owned reports extension surface.<\/p>\n\n
Formalized the dashboard capability panel slot as a reversible Free-owned extension surface for Security Center Pro.<\/p>\n\n
Added stable admin extension slots while keeping free features local-only.<\/p>\n\n
Initial public release with local scans, login protection, firewall controls, setup guidance, advisor checks, privacy tooling, and bounded local data handling.<\/p>","raw_excerpt":"Scan for suspicious files and security risks, strengthen login protection with 2FA\/passkeys, and manage firewall and file-integrity controls.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/355610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=355610"}],"author":[{"embeddable":true,"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/wplura"}],"wp:attachment":[{"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=355610"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=355610"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=355610"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=355610"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=355610"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=355610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}