Skip to main content
Agency Program Get 2× more leads and save 50% on hosting. Built for agencies ready to grow. Book a call
XO Security icon

XO Security

v3.10.4
by ishitaka · 5.0 (9 reviews)

XO Security is a plugin to enhance login related security.

20K+ active installs Updated Nov 16, 2024 Tested to 6.7.2 Requires PHP 5.6
Try Demo Download
Pre-installed Ready in ~10s No card
XO Security

About XO Security

XO Security is a plugin that enhances login security for your website. It offers features such as login logging, limiting login attempts, adding a captcha to login and comment forms, and enabling two-factor authentication. It is compatible with various web servers and also provides additional security measures like disabling XML-RPC and REST API, hiding WordPress version information, and activating maintenance mode. However, if you are using WordPress multisite, it is recommended to set a common login page for all sites to ensure the password loss function works properly.

Screenshots

XO Security screenshot
XO Security screenshot
XO Security screenshot
XO Security screenshot

Frequently asked questions

Are there any considerations for WordPress multisite installations?
If you set separate login pages for the main site and subsites, the password loss function for subsites may not work. It is recommended to set a common login page for all sites in a multisite environment.

Changelog

3.10.4

  • Supported WordPress 6.6.

3.10.3

  • Supported CAPTCHA for login form using ajax.

3.10.2

  • Fixed a mistake in version 3.10.1.

3.10.1

  • Fixed a bug that sometimes prevented login with two-factor authentication.
  • Enhanced the judgment of comment bots.

3.10.0

  • Added option to change author base.
  • Added option to select CAPTCHA type.
  • Enhanced the judgment of comment bots.

3.9.1

  • Fixed a bug where an error message was displayed on the admin screen in PHP 8.2 or higher.

3.9.0

  • Added two-factor authentication function.
  • Fixed a bug where the login page file created by changing the login page may not be deleted during uninstallation.
  • The REST API URL change feature has been deprecated. If it is currently in use, you can continue to use it, but you cannot use it newly.

3.8.1

  • Supported WordPress 6.5.
  • Added ability to delete readme.html file.
  • Tweaked wording on the admin page.
  • Tweaked CSS on the admin page.

3.8.0

  • Added maintenance mode.

See the previous changelogs here

Try other plugins

Yoast SEO icon

Yoast SEO

4.8 · 10M+ installs

Improve your WordPress SEO: Write better content and have a fully optimized WordPress site using the Yoast SEO…