Title: Webro Security Author: webro Published: 2026 年 9 月 1 日 Last modified: 2026 年 9 月 1 日 --- 搜尋外掛 ![](https://ps.w.org/webro-security/assets/banner-772x250.png?rev=3675560) ![](https://ps.w.org/webro-security/assets/icon-256x256.png?rev=3675560) # Webro Security 由 [webro](https://profiles.wordpress.org/webrodk/) 開發 [下載](https://downloads.wordpress.org/plugin/webro-security.1.0.0.zip) * [詳細資料](https://tw.wordpress.org/plugins/webro-security/#description) * [使用者評論](https://tw.wordpress.org/plugins/webro-security/#reviews) * [安裝方式](https://tw.wordpress.org/plugins/webro-security/#installation) * [開發資訊](https://tw.wordpress.org/plugins/webro-security/#developers) [技術支援](https://wordpress.org/support/plugin/webro-security/) ## 外掛說明 A WordPress plugin that adds security headers, CSP, login protection, SMTP, spam protection and more. Functionality is continuously being expanded to cover more ground. #### Features * Adds security headers, including configurable HSTS, X-Frame-Options, COOP and CORP * Supports Content Security Policy (CSP), editable from the admin UI and validated against unrecognized directives * Protects login with rate-limiting * Blocks weak passwords, with an exemption list for individual users * Blocks common/guessable usernames * Validates protected brand names against required domains. Self-registration blocks a brand-impersonating email outright * Locks file editing, with a temporary admin-bar toggle that automatically relocks after a period of inactivity * Honeypot spam protection (CF7, Elementor, WPForms, Forminator, lost password) * Custom SMTP sending, with a test-email button * Central security log with automatic retention, including new user account creation * Removes certain default WordPress traces from `` * English, with community translations available via translate.wordpress.org #### What does it protect against? * Basic login attacks * Some forms of user enumeration * Unwanted WordPress metadata * Missing security headers **Important:** it does not protect against vulnerabilities in other plugins or themes, poor server configuration, or missing updates. #### Compatibility Some security headers can affect elements such as iframes, embeds and third-party scripts. Some of the CSP directives may be too strict and might need loosening depending on your needs. This is done from the CSP field in the admin UI, which is available to the administrator role. #### About Webro Security is developed and maintained by [Webro](https://webro.dk/), a web agency with offices in Odense and Aabenraa, Denmark. Webro builds and runs WordPress sites for companies across a wide range of industries, and this plugin grew out of that daily work. The same hardening steps were being repeated by hand on site after site, so they were collected into one plugin with settings that can be adjusted per site instead of edited in code. The plugin is built by [Lasse Enggaard](https://lasse-enggaard.dk/om/) and [Rikke Rasmussen](https://profiles.wordpress.org/rirasmussen/). Lasse Enggaard is a Danish SEO specialist and partner at Webro. He has worked with SEO since 2015 and with WordPress development alongside it, and today works with search visibility, AI visibility and technical WordPress work for companies. Rikke Rasmussen is a web developer at Webro and has been closely involved in building the plugin and the testing across sites. Both of them continue to maintain it. The plugin is aimed at site owners and the people who look after their sites, not at security researchers. Every setting has a plain-language explanation next to it, so it is clear what a given header or policy actually changes before it is turned on. Development continues, and features are added as they prove useful in real projects. ## 螢幕擷圖 [⌊Dashboard with an overview of active protection and recent security events⌉⌊Dashboard with an overview of active protection and recent security events⌉[ Dashboard with an overview of active protection and recent security events [⌊Security headers: X-Frame-Options, HSTS, COOP and CORP, with a list of the headers actually sent⌉⌊Security headers: X-Frame-Options, HSTS, COOP and CORP, with a list of the headers actually sent⌉[ Security headers: X-Frame-Options, HSTS, COOP and CORP, with a list of the headers actually sent [⌊Content Security Policy, editable one directive per line⌉⌊Content Security Policy, editable one directive per line⌉[ Content Security Policy, editable one directive per line [⌊SMTP settings with sender override and encryption options⌉⌊SMTP settings with sender override and encryption options⌉[ SMTP settings with sender override and encryption options [⌊Password exemptions for individual users⌉⌊Password exemptions for individual users⌉[ Password exemptions for individual users [⌊Brand protection: reserve a domain so only verified accounts can use it⌉⌊Brand protection: reserve a domain so only verified accounts can use it⌉[ Brand protection: reserve a domain so only verified accounts can use it ## 安裝方式 1. Upload the plugin to `wp-content/plugins/` 2. Activate it via the WordPress admin panel #### Uninstallation * Removes the plugin’s saved options * Removes the plugin’s transients * Cleans up its own settings on uninstall ## 使用者評論 這個外掛目前沒有任何使用者評論。 ## 參與者及開發者 以下人員參與了開源軟體〈Webro Security〉的開發相關工作。 參與者 * [ webro ](https://profiles.wordpress.org/webrodk/) * [ Lasse Enggaard ](https://profiles.wordpress.org/lasseenggaard/) * [ Rikke Rasmussen ](https://profiles.wordpress.org/rirasmussen/) [將〈Webro Security〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/webro-security) ### 對開發相關資訊感興趣？ 任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/webro-security/)、 查看 [SVN 存放庫](https://plugins.svn.wordpress.org/webro-security/)，或透過 [RSS](https://plugins.trac.wordpress.org/log/webro-security/?limit=100&mode=stop_on_copy&format=rss) 訂閱[開發記錄](https://plugins.trac.wordpress.org/log/webro-security/)。 ## 變更記錄 #### 1.0.0 * First version ## 中繼資料 * 版本 **1.0.0** * 最後更新 **2 天前** * 啟用安裝數 **少於 10 次** * WordPress 版本需求 ** 6.0 或更新版本 ** * 已測試相容的 WordPress 版本 **7.0.4** * PHP 版本需求 ** 8.0 或更新版本 ** * 語言 * [English (US)](https://wordpress.org/plugins/webro-security/) * 標籤: * [csp](https://tw.wordpress.org/plugins/tags/csp/)[login protection](https://tw.wordpress.org/plugins/tags/login-protection/) [security](https://tw.wordpress.org/plugins/tags/security/)[smtp](https://tw.wordpress.org/plugins/tags/smtp/) [spam protection](https://tw.wordpress.org/plugins/tags/spam-protection/) * [進階檢視](https://tw.wordpress.org/plugins/webro-security/advanced/) ## 評分 這個項目尚無任何評論記錄。 [撰寫評分](https://wordpress.org/support/plugin/webro-security/reviews/#new-post) [查看全部使用者評論](https://wordpress.org/support/plugin/webro-security/reviews/) ## 參與者 * [ webro ](https://profiles.wordpress.org/webrodk/) * [ Lasse Enggaard ](https://profiles.wordpress.org/lasseenggaard/) * [ Rikke Rasmussen ](https://profiles.wordpress.org/rirasmussen/) ## 技術支援 使用者可在技術支援論壇提出意見反應或使用問題。 [檢視技術支援論壇](https://wordpress.org/support/plugin/webro-security/)