Plugin Pulse
← Pulse

WP Hardening (discontinued)

by WebProtect.ai · Uncategorized

The WP Hardening is a one-click tool to fix standard security recommendations on your WordPress website.

⚠ Stale
How scoring works →
53 Health · D
Maintenance 26/100
Rating quality 73/100
Support 70/100

53 health vs 56 average across 16,376 Uncategorized plugins

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

50 / 100

Room to improve

Biggest win: Update recency

Update recency 36/100
WP compatibility 41/100
Rating quality 75/100
Listing tuning 52/100

To rank higher: Last updated 714 days ago — ship an update; wp.org decays a listing's search weight after ~180 days.

Get the full rank-higher report →

Daily downloads

Since 2022-10-05 · 1,424 days · wp.org + Plugin Pulse archive

+12% vs prior 30d
36Downloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

627

now · peak 12.8K

64430d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

WP Hardening (discon · #1927 you Discontinued Product · #8956 Discontinued Product · #10172 Discontinued Product · #43430

Rating trend

Star average over time · dips mark rough releases

4Stars · Aug 26

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

64per 1k installs · Aug 26

Release cadence

No release in a year
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

0

releases in the last 12 months

2.0y ago

latest release · v1.2.8

12

tagged releases on record

Recent releases

1.2.8 · 2.0y ago1.2.7 · 2.0y ago1.2.6 · 2.1y ago1.2.5 · 4.2y ago1.2.4 · 4.8y ago1.2.3 · 5.1y ago1.2.2 · 5.2y ago1.2.1 · 5.2y ago1.2 · 5.5y ago1.1.2 · 6.2y ago1.1 · 6.4y ago1.1.1 · 6.6y ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 99% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v1.2 99%
v1.1 0.5%

Estimated active installs

The public count shows “10K+”. Our estimate pins where the real number sits.

tracked estimate
10K–20K ≈19K

Refined from the date this plugin crossed into its current band.

Install history · since 2019-12-05 · 1,431 observations

10KInstalls · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Details

Version
1.2.8
Last updated
2.0y ago
Added
2019-10-27 · 6 yrs old
Requires WP
4.3
Tested up to
6.0.14
Requires PHP
5.3

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. Version 1.2 * Improvement: Add security headers to the HTTP response * Improvement: Changing the frequency of Hardening audits * Improvement: Configure emails to be sent to upto 15 people * Fix: jQuery bug on fixers page 1.2
  2. Version 1.1 * Initial public release of WP Hardening Plugin. 1.1

Known vulnerabilities

via Wordfence Intelligence

3 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

  1. 2024-09-17 CVE-2024-6641 Incorrect Regular Expression Affects <= 1.2.6 Patched in 1.2.7
  2. 2021-06-07 CVE-2021-24372 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.2.1 Patched in 1.2.2
  3. 2021-06-07 CVE-2021-24373 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.2.2 Patched in 1.2.2

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 6.7

Low memory footprint
Low page-speed impact
Runs on latest PHP + WP
No PHP errors
No JS errors
Activates cleanly
No resource errors
No external HTTP errors
Optimized database use
Frequently updated

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2025-01-25 20K+ → 10K+ down after 361 days in tier
  2. 2024-01-30 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for WP Hardening (discontinued) into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/wp-security-hardening" width="480" height="300" style="border:0" loading="lazy" title="WP Hardening (discontinued) — Plugin Pulse"></iframe>
Preview card ↗

WP Hardening (discontinued): 10K+ active installs, 4.0★ (20 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/wp-security-hardening