by
ghostables
1 (0 reviews)
Ghostables Defender Lite
Active security for WordPress: vulnerability scanning, file integrity, hardening checklist, two-factor authentication, and a tamper-evident audit log.
Ghostables Defender Lite ranks #65,012 among WordPress.org plugins with 1+ active installations, is #2,698 of 4,596 in the Security category, a 1/5 rating from 0 reviews, and was last updated Jun 23, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Tested up to WP 7 (Current: 7.1.2)
v0.1.6
Current Version v0.1.6
Updated 2 months ago
Last Update on 23 Jun, 2026
Refreshed 11 hours ago
Last Refreshed on
#2,698 of 4,596 in Security
Rank
#65,012
—
No change
Active Installs
1+
-80%
KW Avg Position
159
11.5 worse
Downloads
186
+1 today
Support Resolved
0%
—
No change
Rating
20%
Review 1 out of 5
1
(0 reviews)
Next Milestone 10
0+
10+
52,075
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 9 more installs to reach 10+
Rank Changes
Current
#65,012
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
1.0
0 reviews
Overall
20%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 0.1.6
- Last Updated
- Jun 23, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7
- PHP Version
- 7.4 or higher
- Author
- ghostables
Support & Rating
- Rating
- ★ ☆ ☆ ☆ ☆ 1
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,760
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,009
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#17
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#37
Frequently Asked Questions
Common questions about Ghostables Defender Lite
Lite calls one external service: the public WordPress Vulnerability Database at wpvulnerability.net, to look up disclosed vulnerabilities for each installed plugin, theme, and your WordPress core version. No API key, no site URL, no admin email — only the slug being queried and a User-Agent identifying the plugin version. Each lookup is cached locally for 24 hours. See the "External services" section above for the full disclosure. The two-factor QR code is rendered locally in your browser; the TOTP secret never leaves your WordPress install.
The scans run on cron (twice-daily CVE check, daily integrity scan). Runtime hardening is a handful of cheap filter hooks. No page-load impact you'll measure.
The hardening checklist tells you what each fix does before you click it. Every one-click fix is reversible by editing wp-config.php or unchecking the option. Defaults are conservative — nothing is enforced site-wide on first install except the Operator gate, which only restricts Defender's own settings.
Technically yes, but running multiple security plugins is usually counterproductive — they fight over the same hooks. Run one, run it well.
Each row's row_hash is an HMAC-SHA-256 over the previous row's hash plus the row's own fields, keyed with a 32-byte chain key. The chain key is either (a) the GDEF_LITE_AUDIT_KEY constant in your wp-config.php, or (b) auto-generated and stored as a WordPress option on first use. An attacker with database write access can delete or modify a row, but cannot quietly recompute the following row's HMAC without the key — so the next row's stored hash will no longer match, and the break is visible from Settings → Operator → Chain status. For the strongest guarantee, set GDEF_LITE_AUDIT_KEY in wp-config.php so the key never lives in the database alongside the rows it signs.
It's distributed from ghostables.io. Install it alongside Defender Lite and Lite steps aside automatically; every setting you've configured here carries over. You never need it to keep using Defender Lite, which is free and fully functional on its own.
Uninstalling (not just deactivating) drops Defender's three tables and clears its options. Your audit log goes with it. This is intentional — uninstall means uninstall.
