• This plugin provides a user-friendly guide to lots of basic things you can do to secure your WordPress site. I have used this plugin on many WordPress sites, but I have become unhappy with it for two reasons.

    1. Plugin updates are infrequent. That’s not okay for a security plugin. If it’s not up to date, it can’t provide the best security.
    2. It keeps a log of failed login attempts and never told me it was doing that. There is no way to access the log in WordPress and no way to turn this feature off in the plugin settings. On one site, the log contained 2.5 MB of data! When I deactivated and deleted the plugin, it did not clean up the WordPress database, either. I had to manually delete the log from the database.

    Wordfence Security looks very promising. It blocks repeated failed login attempts and has a built-in cache:

    https://wordpress.org/plugins/wordfence/

    I’m going to look into Wordfence to supplement or replace Ultimate Security Checker.

  • The topic ‘Infrequent Updates / Undisclosed Features’ is closed to new replies.