Security snapshot
Across the 36 wordfence-login-security sites we've scanned, compared to the all-WordPress average.
Grade A 0%
Grade B 3%
Grade C 3%
Grade D 17%
Grade F 78%
Fail the header check (F)78%vs 82.6% avg
Leak usernames31%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS92%vs 96.1% avg
Wordfence Login Security
WORDFENCE LOGIN SECURITY
Wordfence Login Security contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA.
Are you looking for comprehensive WordPress Security? Check out the full Wordfence plugin.
TWO-FACTOR AUTHENTICATION
- Two-factor authentication (2FA), one of the most secure forms of remote system authentication available.
- Use any TOTP-based authenticator app or service like Google Authenticator, Authy, 1Password or FreeOTP.
- Enable 2FA for any WordPress user role.
- Completely free to use, no limits or restrictions of any kind.
LOGIN PAGE CAPTCHA
- Easily enable Google ReCAPTCHA v3 on your login and registration pages.
- Stops bots from logging in without inconveniencing your site visitors.
- Robust protection against password guessing and credential stuffing attacks distributed across large IP pools
XML-RPC PROTECTION
- XML-RPC is the biggest target for WordPress attacks, but is often overlooked.
- Protect XML-RPC with 2FA or disable it altogether if it’s not needed.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| k*i*a*k*n*a*e.com (WP 6.8.8) | F | Sep 5, 2026 | |
| a*b*r*a*r*.com | F | Sep 3, 2026 | |
| t*r*n*o*u*c*i*n*l*e*i*i*e.com | F | Sep 1, 2026 | |
| e*t*c*e*d*n*s*o*c*i*g*6*.com (WP 7.1) | F | Aug 31, 2026 | |
| e*e*g*t*a*s*e*r*d.com | F | Aug 29, 2026 | |
| t*n*a*p*e*h*a*n.com (WP 7.1) | F | Aug 28, 2026 | |
| t*n*a*k*n*.com (WP 7.1) | F | Aug 28, 2026 | |
| s*a*l*d*i*.app | D | Aug 28, 2026 | |
| c*c*s*y*h*l*e*.com (WP 7.1) | F | Aug 22, 2026 | |
| b*g*o*a*s*o*s.com | B | Aug 22, 2026 | |
| g*o*t*e*o*i*t*o*.com (WP 7.1) | F | Aug 22, 2026 | |
| t*e*w*k*n*d*e*p*e*e*r.com | F | Aug 21, 2026 | |
| v*r*a*d*u*g*s*e*i*l*s*i*.com (WP 7.1) | F | Aug 21, 2026 | |
| s*p*r*o*l*.com | D | Aug 20, 2026 | |
| s*e*s*e*s.com | D | Aug 9, 2026 | |
| b*w*o*e*g*i*f*r*.com (WP 7.0.2) | F | Jul 31, 2026 | |
| b*w*o*e*g*i*.com (WP 7.0.2) | F | Jul 31, 2026 | |
| f*a*p*p*l.com (WP 7.0.2) | F | Jul 31, 2026 | |
| e*e*t*o*a*k*c*.com | F | Jul 31, 2026 | |
| d*a*a*r*n*t*r*p*t*.com | F | Jul 29, 2026 | |
| k*n*-*o*t*m*n*.de (WP 7.0.2) | F | Jul 29, 2026 | |
| l*u*e*s*.com | F | Jul 29, 2026 | |
| s*f*d.com | D | Jul 29, 2026 | |
| t*e*y*o*s.com | C | Jul 28, 2026 | |
| d*n*l*s*n*a*k*t*n*s*o*.com | D | Jul 27, 2026 | |
| g*z*n.vn (WP 6.8.3) | F | Jul 24, 2026 | |
| i*o*i*v*e*n*m.com (WP 6.9.5) | F | Jul 22, 2026 | |
| c*r*l*q*s*e*t*a*s.com (WP 7.0.2) | F | Jul 22, 2026 | |
| t*n*a*p*e*h*a*n.de (WP 7.0.2) | F | Jul 20, 2026 | |
| h*l*s*i*l*a*e*s*i*c*u*c*l.com | F | Jul 20, 2026 | |
| o*l*n*a*a*e*i*3*5.com (WP 7.0.2) | F | Jul 18, 2026 | |
| b*g*o*a*.shop | D | Jul 18, 2026 | |
| h*d*w*o*c*e*.com | F | Jul 17, 2026 | |
| h*d*w.com | F | Jul 17, 2026 | |
| b*x*e*p*a*e*t*d*o.com | F | Jul 17, 2026 | |
| k*n*-*o*t*m*n*.com (WP 7.0.1) | F | Jul 16, 2026 |
Page 1 of 1