Uğur Biçer

fyndsoft

<p>Are you tired of bloated security plugins that slow down your website and clutter your database?</p>
<p>SecureFusion is designed for WordPress site administrators, developers, and agency owners who demand lightweight, robust, and performance-optimized protection. It acts as an active shield against brute-force attacks, remote XML-RPC exploits, and malicious injections, while keeping your loading speeds lightning fast.</p>
<p>SecureFusion helps you enforce strict Content Security Policies (CSP), hide standard administrative entry points, block automated traffic clusters, track successful/failed logins, block spam comment IPs directly, and monitor unauthorized access patterns via a clean, modern dashboard.</p>
<h3>Features</h3>
<h4>1. Login Protection & Interactive Monitoring</h4>
<ul>
<li><strong>Failed Login Attempts Log:</strong> Visually tracks unauthorized login attempts, displaying timestamps, IP addresses, and lockouts.</li>
<li><strong>IP Range Clustering (/24 Subnets):</strong> Groups attacking IPs into standard /24 subnets. Admins can view individual subnet IPs and copy the CIDR lists to a firewall or Cloudflare blacklist.</li>
<li><strong>Custom Login URL:</strong> Obfuscates <code>wp-login.php</code> and <code>wp-admin</code> access by changing it to a secret URL, stopping automated bots instantly.</li>
<li><strong>Brute-Force Lockout:</strong> Restricts login attempts and locks out offending IPs.</li>
<li><strong>Modify Login Errors:</strong> Alters generic authentication errors so hackers cannot verify whether they got the username or password correct.</li>
</ul>
<h4>2. Firewall & Active Guard</h4>
<ul>
<li><strong>Filter Bad Requests:</strong> Screens URL requests to block XSS, CSRF, and code injection attempts before they reach your theme or database.</li>
<li><strong>REST API Control:</strong> Restricts public endpoint scraping, preventing attackers from harvesting user lists or plugin info.</li>
<li><strong>Content Security Policy (CSP):</strong> Easily configure and inject headers to control script, style, and media execution sources in the client browser.</li>
</ul>
<h4>3. XML-RPC Shield</h4>
<ul>
<li><strong>DDoS Amplification Defense:</strong> Fully disable XML-RPC, or selectively disable pingbacks, preventing your server from participating in DDoS botnets.</li>
<li><strong>XML-RPC Login Protection:</strong> Specifically blocks remote credentials verification through XML-RPC.</li>
</ul>
<h4>4. Enforced SSL / HTTPS</h4>
<ul>
<li><strong>Secure Protocol Redirection:</strong> Forces HTTP to HTTPS redirection across admin screens, login pages, or the entire site to guarantee secure data transmission.</li>
</ul>
<h4>5. Comments IP Blocking & Bulk Shield</h4>
<ul>
<li><strong>Individual Commenter IP Blocking:</strong> Block or unblock comment author IP addresses directly from the WordPress Comments list page.</li>
<li><strong>Bulk Spam IP Blocking:</strong> Instantly block all IP addresses associated with spam comments currently in the Spam directory.</li>
<li><strong>Smart CIDR Range Calculation:</strong> Option to block entire /24 IPv4 subnets or /64 IPv6 ranges of spam comments automatically based on IP distribution to stop persistent spam networks.</li>
</ul>
<h4>6. IP Spoofing Prevention & Successful Login Tracking</h4>
<ul>
<li><strong>Successful Login Logging:</strong> Tracks successful logins to audit administrator and user access alongside failed login attempts.</li>
<li><strong>IP Spoofing Prevention:</strong> Performs strict public vs. private IP checks on client headers (like HTTP_X_FORWARDED_FOR) to prevent attackers from spoofing their IP addresses when behind load balancers or proxies.</li>
</ul>
<p>For complete information, please visit our website <a href="https://fyndsoft.com/securefusion" rel="nofollow ugc">the SecureFusion website</a>.</p>
<h3>Credits</h3>
<p>This plugin bundles and/or utilizes the following third-party libraries:</p>
<ul>
<li>
<p><strong>Chart.js</strong> (v4.5.1)</p>
<ul>
<li>License: MIT</li>
<li>License URI: https://github.com/chartjs/Chart.js/blob/master/LICENSE.md</li>
<li>Source: https://www.chartjs.org</li>
</ul>
</li>
<li>
<p><strong>persist-admin-notices-dismissal</strong></p>
<ul>
<li>License: GPLv3</li>
<li>Source: https://github.com/collizo4sky/persist-admin-notices-dismissal</li>
</ul>
</li>
<li>
<p><strong>wasp</strong></p>
<ul>
<li>License: GPLv3</li>
<li>Source: https://github.com/uuur86/wasp</li>
</ul>
</li>
</ul>


SecureFusion – Security and Firewall by Fyndsoft

Lightweight, high-performance security suite. Protects from brute-force logins, DDoS pingbacks, bad request injections, and manages CSP headers.

Cătălin Dogaru

<p>Avatar Manager for WordPress is a sweet and simple plugin for storing avatars locally and more. Easily.</p>
<p>Enhance your WordPress website by letting your users choose between using Gravatar or a self-hosted avatar image right from their profile screen. Improved workflow, on-demand image generation and custom user permissions under a native interface. Say hello to the Avatar Manager plugin.</p>
<h4>Help Preserve this Project</h4>
<p>Want to support this project for continued development and freely available for everyone? Here’s how you can help preserve Avatar Manager:</p>
<ul>
<li><a href="https://github.com/resourcestream/avatar-manager#contributing" rel="nofollow ugc"><strong>Get involved.</strong></a> Contribute a patch or help resolving an existing issue or confirmed feature request, or submit a translation.</li>
<li><a href="https://core.trac.wordpress.org/ticket/16020" rel="nofollow ugc"><strong>Suggest adding to core.</strong></a> Whether you find Avatar Manager a good fit for WordPress core your feedback can help make a difference.</li>
<li><a href="https://wordpress.org/support/view/plugin-reviews/avatar-manager#postform" rel="ugc"><strong>Add your own review.</strong></a> Let others know how was your experience using Avatar Manager.</li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=SMKJZHX7G3VQS" rel="nofollow ugc"><strong>Make a donation.</strong></a> Keep me motivated with a candy bar or a theater ticket. Is that simple.</li>
</ul>
<p>Avatar Manager is a user-driven project, and all developments and enhancements depend on users like <em>you</em>! Become a contributor or make a donation, and get your name featured in front of a <a href="https://wordpress.org/plugins/avatar-manager/stats/" rel="ugc">growing audience</a>.</p>
<p><em>Thank you for choosing to contribute to Avatar Manager!</em></p>
<h4>Contributing</h4>
<p>Have a bug or a feature request? Please <a href="https://github.com/resourcestream/avatar-manager/issues" rel="nofollow ugc">open a new issue</a>. Before opening any issue, please search for existing issues and read the <a href="https://github.com/necolas/issue-guidelines" rel="nofollow ugc">Issue Guidelines</a>, written by <a href="https://github.com/necolas/" rel="nofollow ugc">Nicolas Gallagher</a>. Please submit all pull requests against development branches.</p>
<ul>
<li><a href="https://github.com/resourcestream/avatar-manager" rel="nofollow ugc">Avatar Manager on GitHub</a></li>
</ul>
<h4>How It’s Made</h4>
<p>Find out how Avatar Manager it’s made on <a href="http://code.tutsplus.com/series/how-to-create-a-wordpress-avatar-management-plugin-from-scratch--wp-33866" rel="nofollow ugc">Tuts+ Code</a>.</p>
<h4>Authors</h4>
<p><strong>Cătălin Dogaru</strong></p>
<ul>
<li>https://profiles.wordpress.org/cdog</li>
<li>https://github.com/cdog</li>
</ul>
<h4>Contributors</h4>
<p>Avatar Manager is brought to you by these fine folks.</p>
<p><a href="https://profiles.wordpress.org/dikiy_forester" rel="nofollow ugc">Artem Frolov</a>,<br />
<a href="https://profiles.wordpress.org/brikou" rel="nofollow ugc">Brice Capobianco</a>,<br />
<a href="https://profiles.wordpress.org/ideos" rel="nofollow ugc">Guy Steyaert</a>,<br />
<a href="https://profiles.wordpress.org/artstorm" rel="nofollow ugc">Johan Steen</a>,<br />
<a href="https://profiles.wordpress.org/wiiz83" rel="nofollow ugc">Lucas Uzan</a>,<br />
<a href="https://profiles.wordpress.org/mateusneves" rel="nofollow ugc">Mateus Neves</a>,<br />
<a href="https://profiles.wordpress.org/modima65" rel="nofollow ugc">Maura Montero D.</a>,<br />
<a href="https://profiles.wordpress.org/pietergoosen" rel="nofollow ugc">Pieter Goosen</a>,<br />
<a href="https://profiles.wordpress.org/schm168" rel="nofollow ugc">Samantha Muthiah</a>,<br />
<a href="https://profiles.wordpress.org/snowboardmommy" rel="nofollow ugc">Snowboard Mommy</a></p>
<h4>Copyright and License</h4>
<p>Copyright © 2021 Cătălin Dogaru</p>
<p>This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.</p>
<p>This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.</p>
<p>You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.</p>


Avatar Manager


First off great that this plugin works, doesn’t cause download of huge images to display as small avatars and seems to work well 🙂



I like that it supports gravatar as a default.



I'm not sure it is still supported but if it is, it needs to have at least meta data updated so everything doesn't point to moved pages and needs to be marked as tested in release 6.4.2 or so...


Works in WP 6.4.2, Not sure is Still Supported

Avatar Manager for WordPress is a sweet and simple plugin for storing avatars locally and more. Easily.

SecureFusion – Security and Firewall by Fyndsoft vs Avatar Manager