The FinderPress tool directory
WordPress plugin
WebDmitriev Protection
WebDmitriev Protection is a compact and efficient security solution for WordPress sites: Brute-Force Protection: Limits failed login attempts on wp-login.php . Entry Point Security: Disables XML-RPC and prevents user enumeration via REST API and author query parameters. File Integrity Guard: Monitor
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 6.0.
SourceWordPress plugins · Oct 21, 2026
01 / Source details
WebDmitriev Protection is a compact and efficient security solution for WordPress sites:
- Brute-Force Protection: Limits failed login attempts on wp-login.php .
- Entry Point Security: Disables XML-RPC and prevents user enumeration via REST API and author query parameters.
- File Integrity Guard: Monitors critical files ( .htaccess and wp-config.php ) for unauthorized changes.
- Uploads Directory Guard: Automatically blocks PHP execution inside /wp-content/uploads/ .
- Lightweight WAF: Filters dangerous URL parameters (SQLi/XSS), blocks malicious User-Agent signatures, and manages IP blacklists.
02 / Source details
- 01Upload the webdmitriev-protection folder to the /wp-content/plugins/ directory.
- 02Activate the plugin through the ‘Plugins’ menu in WordPress.
- 03Go to ‘WD Protection’ in the admin dashboard to configure settings and view threat logs.
03 / Source details
Frequently asked questions.
How does the plugin block brute-force attacks?
It tracks failed login attempts by IP address. If an IP exceeds 5 failed attempts within 15 minutes, access to the login form is temporarily blocked.
What happens if wp-config.php or .htaccess is edited?
The plugin calculates MD5 hashes of critical files. If a modification is detected, a notice appears in the admin panel allowing you to inspect and approve the new file state.
Keep exploring
