Hide My WP Ghost Premium v9.0.11 - WordPress Plugin
Hide My WP Ghost is a WordPress Security plugin .
Related items
Related Security Plugins
Complianz Premium - GDPR/CCPA Cookie Consent
by Real Big Plugins
Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, LGPD, POPIA, APA, RGPD, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results...
ReCaptcha For WooCommerce - WordPress Plugin
by Woo
Security is the most important concern nowadays for any website or an eCommerce store.
Wordfence Premium - WordPress Security Plugin
by Defiant Inc
Wordfence Premium is for self-administered websites that are looking for the ultimate protection against the latest exploits including real-time firewall rules and malware signature, a continuously...
Hide My WP Ghost is a WordPress Security plugin. It’s one of the best security through obscurity WordPress plugins.
It has over 100.000 secured websites, over 1,600,000 brute force attempts protection and over 9.000 email alerts.
The plugin adds filters and security layers to prevent Scripts and SQL Injections, Brute Force attacks, XML-RPC attacks and more.
It changes and hides the common paths, plugins and themes paths offering the best protection against hacker bots attacks.
Note! No file or directory is physically changed. All the changes are made by redirects. All the actions are done automatically by the plugin.
After the common paths are changed, all the common paths are hidden from hackers to protect all the plugins and themes.
The plugin works with other security plugins and adds a layer of firewall to proactively secure your WordPress website against hackers.
Hide My WP Ghost is compatible with all servers, hosting services, and also supports WP Multisite.
Over 90,000 hacking attacks per minute strike WordPress sites and WordPress hosting around the world, hitting not only large corporate websites packed with sensitive data, but also sites belonging to small businesses, independent entrepreneurs, and individuals running personal blogs.
Security of WordPress sites typically tops the list of concerns for new and experienced website owners alike.
For owners of WordPress sites, statistics like that one raises particular worries about the security not just of individual WordPress sites, but of WordPress itself.
Is your website secure? Check your website with Free Website Security Check
Show full descriptionShow less
Protect your WordPress website by hiding the authentication paths like wp-admin, wp-login.php and wp-login and change the common WordPress paths like wp-content, wp-includes, uploads and more.
FREE Hide My WP Ghost – Security Features (over 40 free security options):Hidden Paths:
- Hide WordPress wp-admin URL and redirect it to 404 page or a custom page
- Hide WordPress wp-login.php and redirect it to 404 page or a custom page
- Change the wp-admin and wp-login URLs
- Change lost password URL
- Change register URL
- Change logout URL
- Change activation URL
- Change admin-ajax URL
- Change wp-content URL
- Change wp-includes URL
- Change uploads URL
- Change comments URL
- Change author URL
- Change plugins name URL
- Change themes name URL
- Change category URL
- Change tags URL
- Custom login redirects based on useer role
- Custom logout redirects based on useer role
- Change URLs from Relative to Absolute
- Change URLs in Ajax calls
- Change URLs for Logged Users
- Change paths in Sitemap.xml
- Change paths in Robots.txt
Disable Paths:
- Hide /wp-admin Path
- Hide /wp-login Path
- Hide /login Path
- Hide plugins Paths
- Hide themes Paths
- Hide REST API wp-json
- Hide WordPress HTML comments
- Hide Version and WordPress Tags
- Hide DNS Prefetch WordPress link
- Hide WordPress Generator Meta
- Hide RSD (Really Simple Directory) header
- Hide Emojicons if you don’t use them
Brute Force Protection:
- Disable REST API access
- Disable XML-RPC access
- Disable Embed scripts
- Disable DB-Debug in Frontend
- Disable WLW Manifest scripts
Extra Features:
- Brute Force with Math Captcha
Integrations:
- Backup and Restore settings
- Fix relative URLs
- Change classes using Text Mapping from HTML code
- Cache CSS, JS and Images to optimize the loading speed
- Weekly security check and reports
See All FREE Security Features: https://hidemywp.co/security-features/
- Support for WP Multisite
- Support for Nginx
- Support for IIS
- Support for LiteSpeed
- Support for Apache
- Support for WP Engine
- Support for Inmotion Hosting
- Support for Hostgator Hosting
- Support for Godaddy Hosting
- Support for Host1plus
- Support for Payperhost
- Support for Fastcomet
- Support for Dreamhost
- Support for Bitnami Apache
- Support for Bitnami Nginx
- Support for Google Cloud Hosting
- Support for Litespeed Hosting
- Support for Flyweels Hosting
- Recommended by Wp Rocket
- Recommended by WPML
Compatible with: WP Multisite, Apache, Litespeed, Nginx and IIS.
Plugins Compatibility updates: ManageWP, WPML, W3 Total Cache, Gravity, WP Super Cache, WP Fastest Cache, Hummingbird Cache, Cachify Cache, Litespeed Cache, Cache Enabler, CDN Enabler, WOT Cache, Autoptimize, Jetpack by WordPress, Contact Form 7, bbPress, All In One SEO, Yoast SEO, Squirrly SEO, WP-Rocket, Minify HTML, iThemes Security, Sucuri Security, Back-Up WordPress, Elementor Page Builder, Weglot Translate, AddToAny Share Btn, WordFence Security, Sucuri Security, Asset CleanUp
Hosting Compatibility checked: WP Engine, Inmotion Hosting, Hostgator Hosting, Godaddy Hosting, Host1plus, Payperhost, Fastcomet, Dreamhost, Bitnami Apache, Bitnami Nginx, Google Cloud Hosting, Litespeed Hosting, Flyweels Hosting
To hide all the common WordPress paths you need Hide My WP Ghost version. Check all the Ghost security features below.
The admin URL is the most common path that hackers use to break your WordPress site.
Being able to cover up the common paths is critical because you get to keep intruders away from sensitive website data.
This is crucial, and it will provide you with a great experience and really good results in the long term.
It will surely be worth it, not to mention that hiding the common paths will make hacking a lot harder as well.
If you don’t protect yourself, you will end up having a hacked website sooner or later.
This is a free version of the plugin so you can use it for all your blogs without any restrictions.
No theme or other plugins functionality will be blocked, everything will function the same
Note: The plugin requires custom permalinks. Make sure you have it activated at Settings > Permalinks
Hide My WP Ghost Premium security features:Hidden Paths:
- Hide WordPress /wp-admin path
- Hide WordPress /wp-login.php path
- Hide WordPress /wp-login/ path
- Hide WordPress /login path
- Custom wp-admin and wp-login paths
- Custom admin-ajax.php URLs
- Custom lost password URL
- Custom register URL
- Custom activate URL
- Custom logout URL
- Custom wp-includes path
- Custom wp-content path
- Custom REST API wp-json path
- Custom plugins name
- Custom themes name
- Custom themes style name
- Custom plugins path
- Custom uploads path
- Custom authors path
- Custom comment URL
- Custom category path
- Custom tags path
- Custom login redirects based on useer role
- Custom logout redirects based on useer role
Mapping Text and URLs:
- Hide plugins name
- Hide themes name
- Hide style IDs and META IDs
- Hide author by ID URL
- Hide WordPress common paths like: wp-content, wp-includes, /plugins, /themes, upgrade.php
- Hide WordPress common files like: upgrade.php, install.php, activate.php, wp-config.php, etc.
- Hide RSD (Really Simple Directory) header
- Hide DNS Prefetch WordPress link
- Hide WordPress Generator Meta
- Add Firewall against SQL/Script injection
- Add Security Headers against XSS & Code Injections
- Hide wp-caption, wp-image, wp-blocks, wp-post classes and ids, and more
- Hide Emojicons if you don’t use them
- Change URLs in Ajax calls
- Change URLs in all Caches files
- Change paths in Sitemap.xml
- Change paths in Robots.txt
Disable Paths:
- Change URLs using URL Mapping
- Change classes using Text Mapping
- Change text in CSS and JS files
- Change CDN URLs using CDN Mapping
- Change paths in the cache files
- Change paths in the Feed link
- Change paths in the Sitemap XML
- Change paths in the Robots.txt
Brute Force Protection:
- Hide/Disable XML-RPC access
- Hide/Disable Rest API access
- Disable Embed scripts
- Disable DB-Debug in Frontend
- Disable WLW Manifest scripts
- Disable Right Click
- Disable Copy-Paste
- Disable Drag-Drop
- Disable Inspect Element
- Disable View Source
- Disable Directory Browsing
Events Log:
- Brute Force Protection with Math Captcha
- Brute Force Protection with Google reCaptcha V2
- Brute Force Protection with Google reCaptcha V3
- Custom attempts, timeout, message
- Manage Blacklist and Whitelist IPs
Integrations:
- Log users activity
- Set security alerts by email if users login from different IPs
- Set security alerts by email on Brute Force attacks
- Set security alerts by email if users delete articles
- Set security alerts by email if users delete articles
- Security Check with over 30 check points
Protection against:
- Support for WP Multisite
- Support for Nginx
- Support for IIS
- Support for LiteSpeed
- Support for Apache
- Support for WP Engine
- Support for Inmotion Hosting
- Support for Hostgator Hosting
- Support for Godaddy Hosting
- Support for Host1plus
- Support for Payperhost
- Support for Fastcomet
- Support for Dreamhost
- Support for Bitnami Apache
- Support for Bitnami Nginx
- Support for Google Cloud Hosting
- Support for Litespeed Hosting
- Support for Flyweels Hosting
- Recommended by Wp Rocket
- Recommended by WPML
See All Premium Security Features: https://hidemywpghost.com Check the Demo Website: https://demo.wpplugins.tips/
- Brute Force Attacks,
- SQL Injection Attacks
- Script Injection Attacks
- Cross Site Scripting (XSS)
- and more
Recent releases
Release history
- Editing a custom post type that uses the built-in Categories/Tags taxonomy no longer crashes the Block Editor with "Cannot read properties of undefined"
- Block Editor no longer crashes with "Cannot read properties of undefined" when Hide User Enumeration is on; the users REST endpoint is now hidden from anonymous visitors only, so logged-in Editors and Authors can still edit posts and custom post types
View changelog
View changelog
- Security Log and Events Log not recording properly
- Optimize user logged in verification
Frequently asked questions
Is Hide My WP Ghost Premium GPL licensed?
What is the latest version of Hide My WP Ghost Premium?
How much does Hide My WP Ghost Premium cost on GPLCoffee?
Which WordPress and PHP versions does Hide My WP Ghost Premium support?
Is Hide My WP Ghost Premium safe to download?
Auto-updates included
Install it once, update automatically.
The GPLC Connector installs this plugin from your wp-admin and rolls out new versions to your connected sites - up to 25. Included with 12-month and Geek Lifetime plans (plus legacy 6-month).