by SiteLock 3.4 (14 reviews)

SiteLock Security – WP Hardening, Login Security & Malware Scans

Name: SiteLock Security – WP Hardening, Login Security & Malware Scans
Rating: 3.4 (14 reviews)
Author: SiteLock

Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.

SiteLock Security ranks #5,700 among WordPress.org plugins with 1,000+ active installations, is #377 of 5,058 in the Security category, a 3.4/5 rating from 14 reviews, and was last updated Jun 23, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7 (Current: 7.1.4)

v5.1.2 Current Version v5.1.2

Updated 4 months ago Last Update on 23 Jun, 2026

Refreshed 2 days ago Last Refreshed on

#377 of 5,058 in Security Top 10% by installs Downloads -29.8% this week

View on WordPress.org

Rank

#5,700

— No change

Active Installs

1K+

-39.9%

KW Avg Position

41.6

0.2 worse

Downloads

48.8K

+7 today

Support Resolved

— No change

Rating

68%

Review 3.4 out of 5

3.4 (14 reviews)

Next Milestone 2K

Total Progress 67.3%

1K+ 2K+

680

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 327 more installs to reach 2K+

Rank Changes

Current #5,700

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

3.4

14 reviews

Overall 68%

8 (57%)

0 (0%)

1 (7%)

5 (36%)

Security History

Source: WPVulnerability

2 known vulnerabilities on record · 2 in the last 24 months · checked 3 months ago

Jan 23, 2026

SiteLock Security – WP Hardening, Login Security & Malware Scans [sitelock] < 5.0.3

CVE-2026-24532 · Fixed in v5.0.3
Dec 30, 2025

SiteLock Security – WP Hardening, Login Security & Malware Scans [sitelock] < 5.0.2

CVE-2025-62128 · Fixed in v5.0.2

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 5.1.2
Last Updated: Jun 23, 2026
Requires WP: 5.6+
Tested Up To: 7
PHP Version: 8.0 or higher
Author: SiteLock

Support & Rating

Rating: ★ ★ ★ ☆ ☆ 3.4
Reviews: 14
Support Threads: 0
Resolved: 0%

Keywords

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners such as small businesses, agencies, freelancers, and e-commerce shops who want a security baseline without heavy performance overhead. It solves the problem of weak login protection and unclear security posture by offering hardening controls, two-factor authentication, and on-demand cloud checks with a clear Site Health dashboard.

Two-Factor Authentication (2FA)
Brute-force login defense
Password policy prompts
Session timeouts
Activity Log
Site Health Dashboard
Cloud Checks (Webpage Scan, SSL Verification)
Disable directory listing

Frequently Asked Questions

Common questions about SiteLock Security – WP Hardening, Login Security & Malware Scans

No, the plugin is designed to be lightweight. SiteLock security scans run in the SiteLock cloud, so both recurring scans and on-demand checks are processed off-site, keeping the resource impact on your WordPress site minimal. Locally, the plugin applies optional website hardening and login hygiene. These actions are event-driven with negligible impact on typical page loads. Bottom line: cloud-powered scanning plus low-overhead local controls deliver ongoing monitoring with minimal footprint in WordPress.

No. The plugin focuses on low-impact protections and on-demand checks you control.

The Site Health view shows status at-a-glance. The Cloud Services panel shows your latest cloud scan status and findings. For full history, use your SiteLock dashboard.

Yes, you can use the free plugin features without an account. Core hardening and login security work out of the box. Connect a free SiteLock account to unlock Site Health, Scan Now and recurring Cloud Checks. Paid SiteLock plans add deeper malware and vulnerability scans.

Local protections continue to work. Cloud scans, if configured, will continue to operate but data will not be pulled into the plugin unless they’re connected with a license key.

The free plugin includes WordPress Hardening and Login Security. Connect a free SiteLock account to unlock the Site Health view, enable recurring Email Reputation Scan, SSL Monitoring, Webpage and Vulnerability scans + Scan Now on-demand checks. Paid plans add SMART File and SMART Database scans.

Yes. Every hardening toggle is reversible — disable and retest anytime.

No. This plugin sets your on-site baseline. For active blocking and performance protection, connect a full SiteLock plan to enable the SiteLock Firewall (WAF) and CDN.

Enhanced protection is here — Two-Factor Authentication (2FA) is now available. It adds an extra verification step on top of our existing login protections and works with authenticator apps like Google Authenticator and Microsoft Authenticator.

For security, 2FA is required for all accounts. Users have a 7-day enrollment window to complete setup.