WordPress Application Firewall. Protects against current and future attacks.
As of April 2026, WP WAF is a WordPress WAF plugin with 10 active installations and a 3/5 rating from 2 reviews. It has been downloaded 4.0K+ times in total. Requires WordPress 3.3+ and PHP false+. Available on WordPress.org since 2012. Last updated 12 years ago — may have compatibility concerns. Top alternative: CloudSecure WP Security.
WordPress Application Firewall. Protects against current attacks. Email notification is disabled by default, notification can be activated and configured in Settings > WP WAF. Go to your WP WAF configuration page.
| WordPress | 3.3+ requiredTested up to 3.5.2 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.