Loginizer Security Pro v2.1.3 Plugin
Loginizer Pro is a robust WordPress plugin designed to enhance the security of your website by preventing brute force attacks. It achieves this by blocking login attempts from specific IP addresses after a predefined number of failed attempts, thereby protecting your site from unauthorized access. In addition to IP blocking, Loginizer allows users to manage IP access through blacklisting and whitelisting, providing a flexible and comprehensive approach to website security. The plugin is trusted by over a million WordPress websites and offers extensive documentation and community support to ensure users can maximize its benefits.
The plugin’s functionality is further extended with a range of advanced security features. These include two-factor authentication (2FA) via email or app, passwordless login, and the integration of Google’s reCAPTCHA to defend against automated attacks. Additional security measures such as renaming the login and admin URLs, disabling XML-RPC, and setting up login challenge questions add layers of protection. Loginizer Pro also includes tools for managing user registration, such as domain blacklisting and auto-blacklisting suspicious usernames, making it a comprehensive solution for maintaining the integrity and security of your WordPress site.
Core Features of Loginizer Security Pro Plugin
Free Features:
- Brute force protection with customizable lockout durations.
- Logging of failed login attempts.
- Blacklist and whitelist IPs.
- Custom error messages on failed login attempts.
- Permission checks for important files and folders.
Pro Features:
- MD5 Checksum for core WordPress files.
- Passwordless login via email.
- Two-factor authentication via email or app.
- Configurable login challenge questions.
- Integration with Google reCAPTCHA for login, comments, and registration forms.
- Rename login page and WP-Admin URL to prevent automated attacks.
- Option to disable or rename XML-RPC.
- Username auto-blacklist to prevent common username attacks.
- Domain blacklist for new registrations.
- Ability to change the admin username.
- Auto blacklist IPs based on specified usernames.
- Disable pingbacks.
General Features:
- Blocks IPs after reaching maximum retry attempts.
- Extended lockout periods after multiple lockouts.
- Email notifications to the admin after maximum lockouts.
- Ability to create, manage, and delete IP ranges.
- Detailed logs of failed login attempts.
- Licensed under LGPLv2.1 for safe and secure usage.
What’s New (Changelog) in Loginizer Security Pro v2.1.3
= 2.1.3 =
* [Security] Fixed a security issue in the HybridAuth library used by Social Login. [Reported by Nathan Cross (CyberBadger)]
* [Feature Pro] Passkeys: You can now log in to your website using passkeys, making authentication faster, easier, and more secure without the hassle of passwords.
* [Improvement Pro] Microsoft Social Login now identifies users by their Microsoft account ID instead of their email. The first Microsoft login to an account, or a registration, is now confirmed with a code sent to the user's email.
* [Improvement] Social Login error messages are now escaped before being shown on the login page.
* [Improvement] The Backuply install option now requires the install plugins capability.
* [Bug-Fix Pro] Resetting the 2FA app secret key is now only possible from the 2FA settings page, that has been fixed.
* [Bug-Fix Pro] 2FA emergency codes were not always removed after use, that has been fixed.
* [Bug-Fix Pro] Username enumeration protection was not blocking all variations of the REST users endpoint, that has been fixed.
* [Bug-Fix Pro] Users were not able to save their account settings on the Ultimate Member account page, that has been fixed.
* [Bug-Fix] Social Login now refuses a login when the provider returns an invalid email, instead of sanitizing it.
* [Bug-Fix] Login notification email was causing a fatal error when Really Simple Security 2FA was used, that has been fixed.
* [Bug-Fix] Security settings page input fields would show empty fields when saved, this has been fixed.
Similar Plugins