WordPress has the following weaknesses

nejavo

Otter Contact Form 7 and Snow Monkey Forms are both form creation plugins. Although you can use both, please choose the one that best suits your company. XO Security XO Security Source: WordPress.org “XO Security” “XO Security” is a plugin that allows you to easily improve the security of WordPress . With a variety of features, you can protect WordPress from every angle. Among them, the following functions are simple but expected to be effective. function explanation Limit login attempts By limiting the number of login attempts, we prevent unauthorized logins not only by humans but also by robots such as ``brute force attacks'' (attacks that try random passwords and other possible patterns). Add CAPTCHA to login form It is a system that separates humans and robots based on image tests.


For example, you can prevent unauthorized logins by robots by requiring users to enter the list of phone numbers characters shown in the image before logging in. Change login page URL This is a measure to prevent humans and robots from reaching the login page in the first place by changing the file name "wp-login.php". Hiding username Prevents usernames (login IDs) from being obtained from REST APIs, poster archives, etc. In the first place,  in its default (initial state) against unauthorized logins. Weaknesses of WordPress (initial state) I can only log in by entering my username and password. Anyone can see the login page URL The username you use when logging in will be made public.



More details are explained in the article below. We also introduce how to set up ``XO Security'', so please refer to it. Related article Benefits and settings of XO Security (Security WP plugin) Note Please be careful when using it together with "Google Authenticator", which will be introduced later. If you want to enable "CAPTCHA (image authentication)" in "XO Security", uncheck "Ask for authentication code on a separate screen" in "Google Authenticator". If you enable both, you may be unable to log in due to an error. XO Security XO Security CAPTCHA authentication Google Authenticator Google Authenticator two-screen authentication Google Authenticator Google Authenticator Source: WordPress.