Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs Simple Like Page – Fast & Privacy-Friendly Page Embeds

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!

Embedding social Page content often slows down WordPress sites and loads third-party scripts before visitors interact. Simple Like Page helps you embed Meta™ Page content without hurting performance, by delaying script loading until interaction or visibility. This reduces unnecessary requests, improves Core Web Vitals, and gives you control over when external scripts load. This plugin is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. All trademarks belong to their respective owners. Key Features Privacy-First Loading Delays Facebook script loading until user interaction Optional lazy loading when the embed enters the viewport Helps reduce third-party requests on initial page load Performance Focused Lightweight HTML placeholder before activation No render-blocking Facebook SDK on initial page load Multiple Integration Options Gutenberg block Shortcode Classic widget Theme template tag Extensible Hooks and filters for add-ons Architecture designed for future consent-based extensions How It Works Renders a placeholder instead of the Facebook embed Loads Facebook scripts only after user interaction (or when in view, if enabled) Renders the Page Plugin once scripts are available This approach is designed to improve performance and reduce unnecessary third-party requests. Usage You can add the Facebook Page Plugin in four different ways. 1. Gutenberg Block (Recommended) Edit any post or page Click Add Block (+) Search for Simple Like Page Insert the block Paste your Facebook Page URL Adjust layout and privacy options in the block sidebar 2. Shortcode Use the shortcode inside any post or page: sfp-page-plugin Shortcode parameters: url width height hide_cover show_facepile small_header timeline events messages locale click_to_load lazy_load placeholder_text placeholder_bg_color placeholder_text_color Example: [sfp-page-plugin url="https://www.facebook.com/WordPress" width="320" timeline="true"] 3. Widget Go to Appearance -> Widgets Add SFP – Like Page Plugin Enter your Facebook Page URL Configure display options Save 4. Template Tag (Advanced) For theme developers: 'https://www.facebook.com/WordPress/', 'width' => '300', 'timeline' => true, 'locale' => 'en_US' ); sfp_page_plugin( $args ); } ?> Performance & Privacy By default, the plugin delays Facebook loading until interaction. If you enable lazy loading, scripts are loaded when the embed is in view. Facebook may set cookies or process data once the embed loads. You are responsible for updating your privacy policy as needed. Settings The plugin includes a Performance & Privacy section where you can control: Click-to-load (default off) Lazy loading (default on) Placeholder text Placeholder colors You can also set a default Facebook Page URL and locale in the settings screen. Compatibility Works with modern WordPress themes Compatible with caching and performance plugins Supports Gutenberg and Classic Editor Support Found a bug or have a feature request? Please use the Support tab on WordPress.org.