by webmasters.team 1 (0 reviews)

WT Hardening

Name: WT Hardening
Author: webmasters.team

WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.

WT Hardening ranks #32,036 among WordPress.org plugins with 1+ active installations, is #2,437 of 4,566 in the Security category, a 1/5 rating from 0 reviews, and was last updated May 4, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.9 (Current: 7.1.2)

v1.0.2 Current Version v1.0.2

Updated 4 months ago Last Update on 04 May, 2026

Refreshed 8 hours ago Last Refreshed on

#2,437 of 4,566 in Security

View on WordPress.org

Rank

#32,036

+345 this week

Active Installs

-83.3%

KW Avg Position

— No change

Downloads

509

+15 today

Support Resolved

— No change

Rating

20%

Review 1 out of 5

1 (0 reviews)

Next Milestone 10

Total Progress 60%

0+ 10+

31,336

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 4 more installs to reach 10+

Rank Changes

Current #32,036

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

1.0

0 reviews

Overall 20%

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.0.2
Last Updated: May 04, 2026
Requires WP: 6.0+
Tested Up To: 6.9
PHP Version: 8.0 or higher
Author: webmasters.team

Support & Rating

Rating: ★ ☆ ☆ ☆ ☆ 1
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

Brute Force Security Headers hardening security xmlrpc

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,758

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

Frequently Asked Questions

Common questions about WT Hardening

No. Everything is wired through WordPress hooks. Deactivating the plugin instantly reverts all changes (except HSTS, which browsers cache — enabling HSTS is a conscious decision).

Possibly, if you actually rely on them. Disable the XML-RPC module in the settings — the other protection layers stay active.

The table stays in the database (useful for later analysis). On full uninstall the tables are dropped cleanly.

Tested on a single-site install. Multisite should work since we do not use superadmin-specific APIs, but it is not yet formally supported — file an issue if something breaks.

Modules only register the hooks they actually need. The event log is a single INSERT per event. No scanner, no background work beyond an hourly and daily cleanup of old rows. Real impact on response time: under 1 ms.

Because Strict-Transport-Security has a sticky effect — browsers remember the header for a year. Enabling it too early (before your entire traffic works on HTTPS without errors) can lock users out of the site for a long time. Turn it on once HTTPS is rock-solid.

No — the policy hooks into admin form validation (profile, registration, reset). Programmatic user creation bypasses these hooks by design. For a typical client workflow (users are created through the admin panel) this is enough.