Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Webro Security version 1.0.4 as active, updated 28d ago and tested up to WordPress 7.1.
Overview
About this plugin
A WordPress plugin that adds security headers, CSP, login protection, SMTP, spam protection and more. Functionality is continuously being expanded to cover more ground.
Features
Adds security headers, including configurable HSTS, X-Frame-Options, COOP and CORP
Supports Content Security Policy (CSP), editable from the admin UI and validated against unrecognized directives
Protects login with rate-limiting
Blocks weak passwords, with an exemption list for individual users
Blocks common/guessable usernames
Validates protected brand names against required domains — self-registration blocks a brand-impersonating email outright
Locks file editing, with a temporary admin-bar toggle that automatically relocks after a period of inactivity
Honeypot spam protection (CF7, Elementor, WPForms, Forminator, lost password)
Custom SMTP sending, with a test-email button
Central security log with automatic retention, including new user account creation
Removes certain default WordPress traces from <head>
Blocks usernames from leaking through author URLs, the REST API and embedded author data
English, with community translations available via translate.wordpress.org
What does it protect against?
Basic login attacks
Some forms of user enumeration
Unwanted WordPress metadata
Missing security headers
Important: it does not protect against vulnerabilities in other plugins or themes, poor server configuration, or missing updates.
Compatibility
Some security headers can affect elements such as iframes, embeds and third-party scripts. Some of the CSP directives may be too strict and might need loosening depending on your needs — this is done from the admin UI’s CSP field (administrator role).
Support
dk
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
login protection
spam protection
csp
security
smtp
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 6.0 · PHP 8.0
Update activity5 Oct 202628d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
Version1.0.0→1.0.4
WordPress compatibility7.0.4→7.1.2
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
