Deny All Firewall

The Deny All Firewall plugin for WordPress injects rules into the .htaccess file to block access to everything except genuine site content, reducing server load and preventing hackers from scanning for exploits. The plugin also includes features such as logging and whitelisting blocked requests, a "Lock Down" feature to block all requests with Query Strings or POST data, and a "Force SSL" feature. Additionally, the plugin generates an XML sitemap and prevents the WordPress version from being shown in meta. The plugin currently only supports Apache servers.

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in Deny All Firewall 1.1.6

    Fixed

    The Deny All Firewall plugin for WordPress (version 1.1.7 or earlier) was vulnerable to a type of cyber attack called Cross-Site Request Forgery (CSRF). This attack allowed attackers to make changes t...

    Read More