WordPress.org

Ready to get started?Download WordPress

Plugin Reviews

Wordfence Security

Wordfence Security is a free enterprise class security and performance plugin that makes your site up to 50 times faster and more secure.

7 reviews
Average Rating
4 stars
4.9 out of 5 stars
You are currently viewing the reviews that provided a rating of 3 stars. Click here to see all reviews.
3 stars
Something Changed after 3.9
By , for WP 3.9

I just updated to the new version today but unfortunately the problem that began immediately after 3.9 upgrade persists. It will no longer scan. Plus when I clicked the OPTIONS tab I get a messagae that says

"You do not have sufficient permissions to access this page."

I also notice when this version of WF is active my sites slow down to a crawl. As soon as I deactivate WF the sites speeds up significantly. I use this plug in on 10 sites and all of them speed up when I deactivate WordFence.

Hopefully this is a temporary issue but there was no response to my support left yesterday. So I'll have to find another option. I hate that because up until now this plug in has been really good. But security is so important and can't leave my sites unprotected so I'm off to look for another option.

If someone from WordFence reads this review...it's not necessary to respond I've already found another option.

All the best

3 stars
Amazing plugin but found a minor problem
By , for WP 3.8.1

What a great plugin!

I tried to log in to their site to tell them about a database problem though, and apparently they don't want that sort of feedback except from paid subscribers.

The database wp_wfStatus has no primary key, and it really ought to. This causes problems for some other plugins that perform mass database operations, especially operations like renaming your wordpress site to a different domain or such.

I imagine this will be fixed soon, since it's such an easy thing to do.

3 stars
Rather complicated
By ,

Lots of interesting feature, but it appears rather complicated to use.

3 stars
Works well, but be careful with settings or can get blacklisted!
By , for WP 3.9.1

It runs reports well, but can over-protect and cause the site to be blacklisted. This is a warning to users to be careful about changing the default settings and not to use the setting to block fake GoogleBots as this caused my site to get blacklisted by McAfee. (I'd be happy to change this review if the plugin prevents this from happening, though I doubt I'd want to test it as it's hard to get off the blacklist.)

I have used it with a variety of plugins on different sites with different themes without incompatibility. Overall it works very well.

NOTE: I had a security alert, which told me to delete two files that were possible security issues. One, gdform.php, I could only find in a search as a GoDaddy file, though I don't use GoDaddy. The other I could find no reference to anywhere on the web: odelia_wyn.php When I deleted them, I had no problem with my website. It's working fine. In case others find those files, I hope they find this post and are not afraid to delete them.

3 stars
Works as it was described
By ,

Installed the plugin 4 days ago and I can't stop loving it. It gives me real-time analytics which is much detailed compared to other plugins i'v seen and used. Another great tool is the 'Whois Lookup' but so far it hasn't returned any IP search results so I have been using whois.domaintools.com to run my whois search for specific IPs.

It also helps me detect who is looking in my plugins directory for plugins that do not even exist thereby creating error 404. I noticed a spider from China that kept crawling a directory in the bbpress plugin and other plugins that I have never used and don't exist on my server(see below). Thought it had to be a fake spider and blocked its IP series quickly with 'Advanced Blocking'.

IP: 180.76.5.17
Directory: */wp-content/plugins/bbpress/
templates/default/js/%22%20+
%20favoritesToggleSpan.find(
Hostname: baiduspider-180-76-5-17.crawl.baidu.com
Browser: Baiduspider version 2.0

IP: 142.4.209.168
Directory: */wp-content/plugins/woopra/
readme.txt
Hostname: ks4003314.ip-142-4-209.net
Browser: IE version 6.0 running on WinME

IP: 142.4.209.168
Directory: */wp-content/plugins/seo-
watcher/readme.txt
Hostname: ks4003314.ip-142-4-209.net
Browser: IE version 6.0 running on WinME

I neither have the 'woopra' nor the 'seo-watcher' plugin. So far this plugin had worked as it was described.

3 stars
Good but..
By ,

I don't think country blocking should be paid for. It's so simple for a developer to create.

3 stars
Has not informed me about being "Hacked By Badi"
By , for WP 3.5.1

My site was infected with "Hacked By Badi" but Wordfence has not emailed me about that. Not even speaking about preventing the hack. What is the value of all those emails about availability of plugin updates, if a full-blown hack attack is left unnoticed?

4/13/2013 update: Changing the rating to "Good" because the newest version purportedly detects "Hacked By Badi".

You must log in to submit a review. You can also log in or register using the form near the top of this page.