Title: Website Security Check Author: John Darrel Published: 2019 年 2 月 18 日 Last modified: 2020 年 8 月 27 日 --- 搜尋外掛 這個外掛**並未在最新的 3 個 WordPress 主要版本上進行測試**。開發者可能不再對這個 外掛進行維護或提供技術支援，並可能會與更新版本的 WordPress 產生使用上的相容性問題。 ![](https://ps.w.org/website-security-check/assets/icon-128x128.png?rev=2033003) # Website Security Check 由 [John Darrel](https://profiles.wordpress.org/johndarrel/) 開發 [下載](https://downloads.wordpress.org/plugin/website-security-check.zip) * [詳細資料](https://tw.wordpress.org/plugins/website-security-check/#description) * [使用者評論](https://tw.wordpress.org/plugins/website-security-check/#reviews) * [安裝方式](https://tw.wordpress.org/plugins/website-security-check/#installation) * [開發資訊](https://tw.wordpress.org/plugins/website-security-check/#developers) [技術支援](https://wordpress.org/support/plugin/website-security-check/) ## 外掛說明 **Website Security Check** detects if your WordPress website has vulnerabilities and security flaws. Get a full security report for your website. Check your website with our [Free Website Security Check](https://wpplugins.tips/wordpress-vulnerability-detector/) > **Why is Your WordPress CMS Security Check Important​**: > * **55.9%** of vulnerabilities came from plugins. > * Over **90,978 attacks** happening per minute on both big and small WordPress > sites > * **84% of all security vulnerabilities** on the internet are the result of Cross- > Site Scripting or XSS attacks. Most of the casual bloggers start thinking about site security only after they get into first problems and majority of websites get hacked from entirely preventable issues, like not keeping things updated or using insecure passwords. The majority of hacking attempts are made by bots, and you may be able to prevent hacker bots attacks by hiding your WordPress paths: wp-content, wp-include, plugins, themes, etc. Just by changing the main paths, you may be able to protect your website against things like brute-force attacks, SQL-injection, and requests to your PHP files. The test includes checking for updated plugins, themes and different files and functions which are known to hold security breaches. > **Is WordPress CMS Vulnerable?​**: > * WordPress is one of the most popular CMS (Content Management System) options > on the Internet these days. > * Around 33% of websites are made with WordPress. > * Even if WordPress is known for being a secure CMS, sometimes hackers do find > vulnerabilities. Most site owners don’t know that the biggest risk comes from > the installed plugins and themes. You obviously need to be careful with them, > as plugin vulnerabilities represented 55.9% of the known entry points reported > by respondents. > **What happens if wp-login page is visible**: > * **wp-login page** is certainly one of the most vulnerable pages on your website. > * If this path is visible means that an authentication path is visible and hackers > can **perform brute force login attempts**. > * A successful brute force attack can give hackers access to your admin area. > An unsuccessful one can slow down your website or crush your server. > * There are many strategies for dealing with this problem. The simplest one is > to **hide WordPress login page**. > **What happens if WordPress XML-RPC is visible**: > * XML-RPC is an API that allows anyone to interact with your WordPress website. > * XML-RPC is also a way to manage your site without having to login manually > via the wp-login page. > **Why hackers try to access your WordPress website using xmlrpc.php file?**: > * Instead of 100 login attempts, the hackers could reduce their login attempts > to 10 or less and still try 100 or even thousands of passwords to each request. > * XML-RPC service is always at high risk for WordPress websites. For your safety, > you should disable this service. > * By disabling xml-rpc you can protect your website from DDoS attacks, brute > force attacks, malicious pingback response. If you like Website Security Check please help us and write us a positive review. https://wordpress.org/support/plugin/website-security-check/reviews/#new-post Try also our security plugin: **[Hide My Wp Ghost Free](https://wordpress.org/plugins/hide-my-wp/)** ## 螢幕擷圖 [⌊Choose to start the report on demand for Website Security Check⌉⌊Choose to start the report on demand for Website Security Check⌉[ Choose to start the report on demand for Website Security Check [⌊Every task in Website Security Check comes with details and solutions⌉⌊Every task in Website Security Check comes with details and solutions⌉[ Every task in Website Security Check comes with details and solutions ## 安裝方式 Manually install the Website Security Check plugin: 1. Log In as an Administrator on your WordPress site. 2. In the menu displayed on the left, there is a “Plugins” tab. Click it. 3. Now click “Add New”. 4. There, you have the “Upload” button. Click the “Upload” button 5. Upload the website-security-check.zip file. 6. After the upload it’s finished, click Activate Plugin. 7. Start checking your website security with one click 9. Enjoy! Website Security Check Security WordPress Security Check ## 常見問題集 ### Does this plugin work on WP Multisite? Yes, the plugin works on both Single Website and WP Multisite. The plugin also works with Apache, Nginx, IIS and LiteSpeed servers ### Is this Plugin free of charge? Yes. The plugin will always be free. We will include all the required Security updates. ### Is this plugin going to protect my website from all hackers? This plugin will not protect your website from hackers but it will detect the security flaws. ## 使用者評論 ![](https://secure.gravatar.com/avatar/98505a8c0d8324c82161a308d141db2966908f78300d4f0c5773ee01aa411251? s=60&d=retro&r=g) ### 󠀁[Website Vulnerability Report by Website Security Check](https://wordpress.org/support/topic/website-vulnerability-report-by-website-security-check/)󠁿 [samuel5](https://profiles.wordpress.org/samuel5/) 2021 年 2 月 9 日 We usually do not write reviews but this one deserves it! Even with the best security plugin installed, we never knew what additional vulnerability check needed to be done to guard against website vulnerabilities- this plugin does exactly just that! You don’t need to hire a security expert, you can fix most of the listed vulnerability issues on your own with the help of this plugin. Deserves our 5 star rating, absolutely recommended. ![](https://secure.gravatar.com/avatar/ac727a64a44cb6eb0d31838a4e0407acb79e7feb5895c4fa2a9a237aafc9582a? s=60&d=retro&r=g) ### 󠀁[Good report](https://wordpress.org/support/topic/good-report/)󠁿 [gabydor](https://profiles.wordpress.org/gabydor/) 2019 年 6 月 5 日 The security report is good and I learner how to repair the problems in my site. Good job! [ 閱讀全部 1 則使用者評論 ](https://wordpress.org/support/plugin/website-security-check/reviews/) ## 參與者及開發者 以下人員參與了開源軟體〈Website Security Check〉的開發相關工作。 參與者 * [ John Darrel ](https://profiles.wordpress.org/johndarrel/) [將〈Website Security Check〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/website-security-check) ### 對開發相關資訊感興趣？ 任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/website-security-check/)、 查看 [SVN 存放庫](https://plugins.svn.wordpress.org/website-security-check/)，或 透過 [RSS](https://plugins.trac.wordpress.org/log/website-security-check/?limit=100&mode=stop_on_copy&format=rss) 訂閱[開發記錄](https://plugins.trac.wordpress.org/log/website-security-check/)。 ## 變更記錄 #### 1.2.00 * Compatible with WordPress 5.5 * Fixed some task issues #### 1.1.20 * Compatible with WordPress 5.4 #### 1.1.08 * Compatible with WordPress 5.3.1 * Added dashboard security meter * Added new tasks in Security check * Update the compatibility with more plugins #### 1.0.07 * Compatible with WordPress 5.3 #### 1.0.06 * Update security tasks * Compatible with WordPress 5.2.2 #### 1.0.05 * Update compatibility with HTTPS * Fix minor bugs * Compatible with WordPress 5.2.1 #### 1.0.04 * Compatible with WordPress 5.2 #### 1.0.03 * Compatible with WordPress 5.1.1 #### 1.0.02 * Compatible with WordPress 5.1 #### 1.0.01 * Update – Uploaded plugin ## 中繼資料 * 版本 **1.2.00** * 最後更新 **6 年前** * 啟用安裝數 **100+** * WordPress 版本需求 ** 4.3 或更新版本 ** * 已測試相容的 WordPress 版本 **5.5.20** * PHP 版本需求 ** 5.6 或更新版本 ** * 語言 * [English (US)](https://wordpress.org/plugins/website-security-check/) * 標籤: * [security](https://tw.wordpress.org/plugins/tags/security/)[security check](https://tw.wordpress.org/plugins/tags/security-check/) [wordpress security check](https://tw.wordpress.org/plugins/tags/wordpress-security-check/) * [進階檢視](https://tw.wordpress.org/plugins/website-security-check/advanced/) ## 評分 5 星，滿分為 5 星 * [ 2 個 5 星使用者評論 ](https://wordpress.org/support/plugin/website-security-check/reviews/?filter=5) * [ 0 個 4 星使用者評論 ](https://wordpress.org/support/plugin/website-security-check/reviews/?filter=4) * [ 0 個 3 星使用者評論 ](https://wordpress.org/support/plugin/website-security-check/reviews/?filter=3) * [ 0 個 2 星使用者評論 ](https://wordpress.org/support/plugin/website-security-check/reviews/?filter=2) * [ 0 個 1 星使用者評論 ](https://wordpress.org/support/plugin/website-security-check/reviews/?filter=1) [撰寫評分](https://wordpress.org/support/plugin/website-security-check/reviews/#new-post) [查看全部使用者評論](https://wordpress.org/support/plugin/website-security-check/reviews/) ## 參與者 * [ John Darrel ](https://profiles.wordpress.org/johndarrel/) ## 技術支援 使用者可在技術支援論壇提出意見反應或使用問題。 [檢視技術支援論壇](https://wordpress.org/support/plugin/website-security-check/) ## 贊助 想要支援這個外掛的發展嗎？ [ 贊助這個外掛 ](https://wpplugins.tips/wordpress)