Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace
A simple woocommerce memberships plugin for offering FREE AND PREMIUM SUBSCRIPTION for your multi-vendor marketplace (WCFM Marketplace, WC Vendors, WC Product Vendors & Dokan). You may set up unlimited membership levels (example: free, silver, gold etc) with different pricing plan, capabilities and commission. Documentations:- WCFM – Membership Video Tutorials Experience membership subscription here – Membership Demo HAVE SUPPORT OF MY MULTI-VENDOR WooCommerce Multivaendor Membership works with all popular marketplace add-ons – 🔖 WooCommerce Multivendor Marketplace 🔖 WC Vendors and WC Vednors PRO 🔖 Dokan Lite and Dokan PRO 🔖 WooCommerce Product Vendors HAVE FREE AND PAID MEMBERSHIPS You can configure it to have free and/or paid memberships on your site. Paid membership payment is handled securely via PayPal. Both one time and recurring/subscription payments are supported. HAVE SUPPORT OF MY PAYMENT GATEWAYS You can setup membsership subsctiptions with all flexibilities and with different intgegrated payment options as well – 👉 FREE 👉 PayPal 👉 Bank Transfer 👉 Stripe (3D Secure & SCA Compatible) Are you missing your payment gateway then setup using WC Products – HAVE DIFFERENT COMMISSION MODEL You can configure different commission structure for each membership level. Fixed and percent both are supported. HAVE DIFFERENT CAPABILITIES You can assign different capability module for each membership level. You may create totally different capability group with all flexibilities (example: product limit, categories, product types etc) for each membership level. But this is not directly part of this add-on, Capability modules are come from WCFM – Groups & Staffs. Registration OTP Veirification 👨 Indian Users – https://wordpress.org/plugins/sms-alert/ 👨 Other Users – https://woocommerce.com/products/twilio-sms-notifications/ MEMBERSHIP DETAILS Your vednors will have full details of their membership under their WCFM dashboard. They may also change their subscription plan any time – upgrade or downgrade. WHAT ABOUT NON-VENDOR USERS Any user of the site (except Administrator and Shop manager) may apply for membership subscription. Pay for Product Option This will allow you to setup a system where vendor has to pay before adding a product – Just to mention, it works as a add-on for WooCommerce Frontend Manager. Translations Potuguese (Thanks to Rafael Sartori) Spanish (Thanks to @ffthernandez) German (Thanks to Ciao) Feedback All we want is love. We are extremely responsive about support requests – so if you face a problem or find any bugs, shoot us a mail or post it in the support forum, and we will respond within 6-12 hours(during business days). If you get the impulse to rate the plugin low because it is not working as it should, please do wait for our response because the root cause of the problem may be something else. It is extremely disheartening when trigger happy users downrate a plugin for no fault of the plugin. Feel free to reach us either via our support forum or WordPress.org, happy to serve anything you looking for. Really proud to serve and enhance WooCommerce. Be with us … Team WC Lovers
