KW Security

KW Security - WordPress Plugin A lightweight WordPress security plugin that provides controlled updates and essential security enhancements for WordPress installations. Features - 🔒 Controlled Updates: Allows security patches while blocking major updates - 🛡️ HTTP Security Headers: X-Frame-Options, CSP, HSTS, Referrer-Policy, Permissions-Policy - 🚪 Hide Login URL: Replace /wp-login.php with a custom slug - 👤 User Enumeration Protection: Redirect ?author=N requests to homepage and gate /wp/v2/users REST endpoint - 👤 Disable Author URLs: Redirects /author/username archive pages to the homepage, preventing username exposure via author slugs - 🔐 Login Rate Limiting: Lock out IPs after repeated failed login attempts - 🔍 File Integrity Monitoring: Daily scan of WP root for unknown PHP files and modifications to index.php / wp-config.php - 🔑 Strong Password Policy: Enforce 12+ char passwords with mixed case, digits, and symbols for administrator accounts - 💬 Comment Security: Disables comments, pingbacks, and trackbacks - 📁 File Security: Prevents dangerous file uploads and disables file editing - 📋 Activity Log: Records logins, failed logins, plugin/theme changes, post edits, media up