Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!
Top keywords
- security27×3.54%
- really15×1.97%
- simple15×1.97%
- login14×1.84%
- really simple14×1.84%
- really simple security11×1.44%
- simple security11×1.44%
- wordpress10×1.31%
- vulnerability9×1.18%
- ssl8×1.05%
- site7×0.92%
- website6×0.79%
MediaBlaster – Video CMS, IPTV, Podcasts & Streaming Toolkit
MediaBlaster is the next evolution of WP Smart TV. Originally launched as WP Smart TV, the plugin helped WordPress users create IPTV-style video feeds for platforms like Roku Direct Publisher. Roku Direct Publisher is discontinued, and the live Roku JSON feed has moved to the separate WP Smart TV – Legacy plugin (https://github.com/rovidxmedia/wp-smart-tv-legacy). MediaBlaster is the forward path for video CMS, players, podcasts, subscriptions, and the /wp-json/mediablaster/v3/ REST API. That is why WP Smart TV has been renamed and rebuilt as MediaBlaster. MediaBlaster is a WordPress-powered media CMS for creators, publishers, educators, filmmakers, podcasters, and businesses that want to organize, publish, and monetize video and audio content from one central place. Use it to build: Video libraries IPTV-style content catalogs Podcast and episode archives Membership-based media sites Headless WordPress media backends Custom video websites Roku, mobile, TV, or web app content sources AI-assisted media brands and creator platforms Learn more at mediablaster.io. Join the MediaBlaster creator community on Skool. WP Smart TV is now MediaBlaster If you previously used WP Smart TV, this is the same plugin project moving forward under a new name. The name has changed because the plugin is no longer focused only on “smart TV” or Roku Direct Publisher workflows. MediaBlaster is designed for the broader media publishing landscape: web video, Vimeo libraries, podcasts, subscriptions, headless WordPress, custom apps, and creator-led media platforms. Important notes for existing users: Existing WP Smart TV content remains supported. Existing video post types and metadata are preserved where possible. The user-facing name is now MediaBlaster. The live Roku Direct Publisher REST feed (/wp-json/tv/roku/) and legacy /wp-json/wpst/v1/ routes are not registered in 3.0.0. Roku Direct Publisher admin screens (Roku Settings, Recipes, feed export) have been removed from MediaBlaster. If you still need a Roku Direct Publisher JSON feed, use the separate WP Smart TV – Legacy plugin: https://github.com/rovidxmedia/wp-smart-tv-legacy New development is focused on MediaBlaster as a modern WordPress media platform (REST API, players, podcasts, subscriptions). Key Features Video CMS for WordPress MediaBlaster adds structured media content management to WordPress, allowing you to organize video content using dedicated media post types and metadata. Manage: Movies Episodes Series Short-form videos Video metadata Thumbnails Captions HLS and MP4 video URLs Vimeo-connected media Legacy video metadata (captions, trickplay, ad breaks) when Legacy Controls are enabled MediaBlaster Player MediaBlaster includes a modern HTML5 video player powered by Video.js with a native fallback. Embed methods (all use the same PHP renderer): Shortcode [mediablaster_player] (legacy alias: [tv-video-player]) Gutenberg block mediablaster/player Elementor widget (when Elementor is active) Features include HLS/DASH/MP4 playback, captions and chapter tracks, subscription-aware locked states, and post-backed source resolution from MediaBlaster video meta. Vimeo Integration Vimeo integration is built into the core plugin but disabled by default. Enable it under MediaBlaster → General Settings → Enable Vimeo Integration. MediaBlaster supports creators and publishers using Vimeo Pro, Business, or other Vimeo-hosted libraries. Features include: Vimeo OAuth connection flow Vimeo video URL support Vimeo metadata syncing Thumbnail importing HLS video URL support where available Tags, titles, and descriptions Guided Vimeo Mass Import workflow Review-before-import process This replaces the older separate Vimeo Extender workflow and brings Vimeo support directly into the core plugin. Modern Vimeo Mass Importer The Vimeo Mass Importer has been redesigned to make importing large video libraries easier. The new importer includes: Cleaner card-based interface Import readiness status Review & Import step Collapsed advanced settings Loading and progress states Better error handling Simpler workflow for non-technical users Podcast & Episode Publishing (Beta) Podcast support is built into MediaBlaster but disabled by default. Enable it under MediaBlaster → General Settings → Enable Podcasts. When enabled, MediaBlaster adds: Podcast Shows and Podcast Episodes custom post types Per-show RSS feeds (Apple Podcasts / Spotify-compatible) Public show and episode pages (optional) Podcast Settings tab (RSS bases, public URLs, premium teasers when subscriptions are on) REST API at /wp-json/mediablaster/v3/podcasts Podcast Audio Player — shortcode [mediablaster_audio_player], Gutenberg block mediablaster/audio-player, Elementor widget, and default episode templates Podcast features are in beta and may change in future releases. Subscription Foundation MediaBlaster includes a subscription and entitlement foundation for publishers who want to restrict access to premium content. Subscription features include: Subscription tiers Access groups Manual subscriber management Subscriber access rules Subscription-aware video and podcast content controls REST API auth and subscriber status endpoints Shortcodes for subscribe/account workflows Subscriptions are disabled by default. Enable early access by adding define( 'WPST_SUBSCRIPTIONS_ENABLED', true ); to wp-config.php, then configure under MediaBlaster → Subscriptions. Stripe Checkout Support MediaBlaster includes early Stripe Checkout support for web-based subscriptions. Stripe features include: Stripe hosted checkout Stripe billing portal Tier-to-Stripe Price ID mapping Stripe webhook handling Subscription sync tools Stripe checkout shortcode Public subscription app configuration endpoint (GET /app/config) Additional payment provider support is planned for app and platform-based payment workflows. App Config MediaBlaster includes a platform app configuration system for connected TV and mobile clients. Admin: MediaBlaster → App Config (under General Settings) with an App Settings tab (additional platforms planned) Public REST: GET /wp-json/mediablaster/v3/config?platform=roku Configure branding colors (color picker + custom hex), fallback hero/poster images (URL, pkg: path, or Media Library), navigation features, labels, home layout, and boot behavior Saved settings merge with sensible defaults; homeRows returns [] in v1 Distinct from subscription GET /app/config (Stripe and auth client settings) REST API for Headless and App Builds MediaBlaster includes a modern REST API foundation under: /wp-json/mediablaster/v3/ This API is designed for: Headless WordPress sites Custom front ends Mobile apps Roku apps TV apps AI-generated front ends Subscriber-aware media apps The goal is to make WordPress the content hub while allowing developers and creators to build whatever front end they need. Legacy WP Smart TV Compatibility MediaBlaster preserves existing WP Smart TV content and metadata, but does not serve the Roku Direct Publisher REST feed in 3.0.0. Removed in MediaBlaster 3.0.0: Live Roku Direct Publisher feed at /wp-json/tv/roku/ Legacy REST namespace /wp-json/wpst/v1/ Roku Direct Publisher admin screens (Roku Settings, Recipes, feed export UI) Still available in MediaBlaster: Existing video post types, rovidx_smarttv_* meta, and series structures Optional Legacy Controls on General Settings (trickplay/BIF, subtitles, advanced fields, advertising metaboxes) Roku JSON import logic (internal; admin Import/Export tab removed — use REST API or the legacy plugin for feed output) Internal Roku feed builder class (for compatibility hooks only; not registered as a public REST route) Need a Roku Direct Publisher JSON feed? Install the open-source legacy plugin maintained separately: https://github.com/rovidxmedia/wp-smart-tv-legacy That plugin (WP Smart TV – Legacy, v2.3.0) continues bug-fix support for Roku Direct Publisher workflows. MediaBlaster 3.0.0+ is the forward path for REST API, players, podcasts, and subscriptions. Shortcodes MediaBlaster includes shortcodes for displaying and interacting with media content inside WordPress pages and posts. Available shortcodes include: [mediablaster_player] / [tv-video-player] — video player [mediablaster_audio_player] — podcast audio player (podcasts enabled) [wpst_subscribe] / [wpst_stripe_checkout] — Stripe checkout (subscriptions enabled) [wpst_account] — subscriber account and billing portal (subscriptions enabled) Shortcode availability depends on which features are enabled. Built-in Documentation MediaBlaster includes in-plugin documentation inside WordPress admin. Look for: MediaBlaster → Docs Documentation may include setup guides for: App Config (Roku and platform app settings) Vimeo integration Subscriptions Stripe Checkout REST API usage MediaBlaster Player and Podcast Audio Player Podcast publishing Developer references Vimeo, podcast, and subscription guides appear only when those features are enabled. Who MediaBlaster Is For MediaBlaster is built for: Video creators Podcasters Course creators Filmmakers Churches and ministries Educators Local media companies Niche streaming publishers AI content creators Agencies building media websites for clients Developers building custom app front ends Businesses that want a branded media library If you want WordPress to act as the hub for a media-driven website, video platform, podcast network, or custom streaming app, MediaBlaster is built for that direction. What MediaBlaster Is Not MediaBlaster is not a video hosting service. You still need to host your media files with a proper video host, CDN, Vimeo account, cloud storage provider, or other media delivery system. MediaBlaster helps you organize, manage, display, structure, and publish your media from WordPress. Recommended Media Hosting MediaBlaster works best when paired with a dedicated media hosting solution. Common options include: Vimeo Bunny.net Cloudflare Stream Amazon S3 and CloudFront Wasabi Custom HLS hosting Other CDN-backed media storage YouTube is generally not recommended for direct video feed workflows because YouTube does not provide the direct HLS or MP4 URLs required for many custom video player and app workflows. Getting Started After activating MediaBlaster: Go to MediaBlaster → General Settings. Choose which media features you want to enable (post types, Vimeo, podcasts). If using Vimeo, enable Vimeo Integration and connect your Vimeo app. If using podcasts, enable Podcasts and configure Podcast Settings. Add or import your video or podcast content. Review your content metadata. Use MediaBlaster shortcodes, templates, or REST API endpoints to publish your content. Visit MediaBlaster → Docs for setup guides. Roadmap MediaBlaster is being developed as a broader media publishing system for WordPress. Planned areas of focus include: Podcast publishing improvements (currently in beta) More REST API endpoints Improved headless front-end support Better subscription workflows Additional payment provider support Better app-focused content delivery Creator and agency documentation Example front-end builds Tutorials for building custom MediaBlaster themes and apps Join the community to follow development, ask questions, and help shape the roadmap on Skool. Developer Notes MediaBlaster is designed to support both traditional WordPress sites and headless WordPress builds. Developers can use the MediaBlaster REST API (/wp-json/mediablaster/v3/), custom post types, metadata, and WordPress theme system to build custom media experiences. For Roku Direct Publisher JSON feeds specifically, use the legacy plugin at https://github.com/rovidxmedia/wp-smart-tv-legacy. For custom Roku channels or other apps, consume the MediaBlaster v3 REST API. Potential use cases include: Custom WordPress themes Next.js front ends React Native apps Roku apps Expo mobile apps TV-style interfaces Subscriber-only media portals AI-generated content sites Niche streaming networks Support For documentation and updates, visit mediablaster.io. For community discussion, tutorials, and creator workflows, join us on Skool. License MediaBlaster is licensed under the GPL v2 or later. See: https://www.gnu.org/licenses/gpl-2.0.html