Title: XO Security
Author: ishitaka
Published: <strong>18. Januar 2016</strong>
Last modified: 12. April 2026

---

Plugins durchsuchen

![](https://ps.w.org/xo-security/assets/banner-772x250.png?rev=3068775)

![](https://ps.w.org/xo-security/assets/icon-256x256.png?rev=3068775)

# XO Security

 Von [ishitaka](https://profiles.wordpress.org/ishitaka/)

[Herunterladen](https://downloads.wordpress.org/plugin/xo-security.3.10.9.zip)

 * [Details](https://de.wordpress.org/plugins/xo-security/#description)
 * [Rezensionen](https://de.wordpress.org/plugins/xo-security/#reviews)
 *  [Installation](https://de.wordpress.org/plugins/xo-security/#installation)
 * [Entwicklung](https://de.wordpress.org/plugins/xo-security/#developers)

 [Support](https://wordpress.org/support/plugin/xo-security/)

## Beschreibung

XO Security is a plugin to enhance login related security.
 This plugin does not
write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.

#### Functions

 * Record login log.
 * Limit login attempts.
 * Add Captcha to the login form and comment form.
 * Change the URL of the login page.
 * Enable two-factor authentication (2FA) for login.
 * Login Alert.
 * Disable login by mail address.
 * Disable login by user name.
 * Change login error message.
 * Disable XML-RPC and XML-RPC Pingback.
 * Disable REST API.
 * Disable author archive page.
 * Remove comment author class of comments list.
 * Remove the username from the oEmbed response data.
 * WooCommerce login page protection.
 * Anti-spam comment.
 * Hide WordPress version information.
 * Edit the author slug.
 * Disable RSS and Atom feeds.
 * Activate maintenance mode.
 * Delete the readme.html file.

#### WordPress multisite considerations

If you set the login page separately for the main site and the subsite, you will
not be able to use the password loss function of the subsite. We recommend that 
you set the login page to be common to all sites.

## Screenshots

 * [[
 * Login log page.
 * [[
 * Status page.
 * [[
 * Login setting page.
 * [[
 * Profile page.

## Installation

 1. Upload the `XO-Security` folder to the `/wp-content/plugins/` directory.
 2. Activate the plugin through the Plugins menu in WordPress.
 3. Go to „Settings“ -> „XO Security“ and customize behaviour as needed.

## FAQ

### Login page is not displayed.

Please initialize the settings.

 * In wp_options table, the value of the option_name field (column) is to remove
   the record of „xo_security_options“.
 * If you have set the login page, please delete the file.

### The CAPTCHA is not displayed.

Please install mbstring and GD module.

## Rezensionen

![](https://secure.gravatar.com/avatar/784de19f5e97e08d76d324afd66c72cddf41ce5ce498d514bbaf75dd26f19a34?
s=60&d=retro&r=g)

### 󠀁[Awesome!](https://wordpress.org/support/topic/awesome-10633/)󠁿

 [imawc](https://profiles.wordpress.org/imawc/) 7. Februar 2026

This plugin is lightweight and easy to use, so I recommend it.

![](https://secure.gravatar.com/avatar/80aa6d2e36005c8663ab62af2d0c4079d4332b747451a9551b118de565485d37?
s=60&d=retro&r=g)

### 󠀁[What a great plugin!](https://wordpress.org/support/topic/what-a-great-plugin-98/)󠁿

 [まーちゅう](https://profiles.wordpress.org/rocketmartue/) 25. Dezember 2025

It’s my top recommendation for security plugins on WordPress sites.It includes all
the security features I need.

![](https://secure.gravatar.com/avatar/8b69bd13043e0e9a01afad579f200238c7420d98b8724cef178dc58dbb0cfc1c?
s=60&d=retro&r=g)

### 󠀁[基本的なセキュリティ機能が揃っています](https://wordpress.org/support/topic/%e5%9f%ba%e6%9c%ac%e7%9a%84%e3%81%aa%e3%82%bb%e3%82%ad%e3%83%a5%e3%83%aa%e3%83%86%e3%82%a3%e6%a9%9f%e8%83%bd%e3%81%8c%e6%8f%83%e3%81%a3%e3%81%a6%e3%81%84%e3%81%be%e3%81%99/)󠁿

 [altmmc](https://profiles.wordpress.org/altmmc/) 4. November 2023

タイトル通りです。AIOS等の定番プラグインと比べると機能は少ないですが、必要最低限
の対策が揃っており設定が非常にわかりやすいので使いやすいです。これだけでは不安という
人はBBQ Firewallを併用すると良いです。

![](https://secure.gravatar.com/avatar/05a31a03eb59cb0406a1b5299d74a7c86d0b439176fb37a857a50ac64ca6ff84?
s=60&d=retro&r=g)

### 󠀁[This one is all you need !](https://wordpress.org/support/topic/this-one-is-all-you-need/)󠁿

 [Katsushi Kawamori](https://profiles.wordpress.org/katsushi-kawamori/) 8. April
2023

This one plugin completes my security measures. Thanks !!

![](https://secure.gravatar.com/avatar/8d6351d61a0c27e84566bb622595a6369cbb9190209c8c9c1c6f853047ebf416?
s=60&d=retro&r=g)

### 󠀁[Great useful and easy to use!](https://wordpress.org/support/topic/great-useful-and-easy-to-use/)󠁿

 [Anonymous User 20656096](https://profiles.wordpress.org/anonymized-20656096/) 
25. Oktober 2022

I recommend for those looking for a simple and reliable security plugin.

![](https://secure.gravatar.com/avatar/2075f93877b9bb87fb6cb695d1524be0634f6279b5708484f4c1d6ca0f300535?
s=60&d=retro&r=g)

### 󠀁[awesome](https://wordpress.org/support/topic/awesome-8995/)󠁿

 [ulafox](https://profiles.wordpress.org/xintv123/) 19. August 2021

This plugin has become one of my favorite plugins, it protects my website from malicious
users, and the development team provides support very quickly! Thanks!

 [ Alle 11 Rezensionen lesen ](https://wordpress.org/support/plugin/xo-security/reviews/)

## Mitwirkende und Entwickler

„XO Security“ ist Open-Source-Software. Folgende Menschen haben an diesem Plugin
mitgewirkt:

Mitwirkende

 *   [ ishitaka ](https://profiles.wordpress.org/ishitaka/)

„XO Security“ wurde in 1 Sprache übersetzt. Danke an [die Übersetzer](https://translate.wordpress.org/projects/wp-plugins/xo-security/contributors)
für ihre Mitwirkung.

[Übersetze „XO Security“ in deine Sprache.](https://translate.wordpress.org/projects/wp-plugins/xo-security)

### Interessiert an der Entwicklung?

[Durchstöbere den Code](https://plugins.trac.wordpress.org/browser/xo-security/),
sieh dir das [SVN-Repository](https://plugins.svn.wordpress.org/xo-security/) an
oder abonniere das [Entwicklungsprotokoll](https://plugins.trac.wordpress.org/log/xo-security/)
per [RSS](https://plugins.trac.wordpress.org/log/xo-security/?limit=100&mode=stop_on_copy&format=rss).

## Änderungsprotokoll

#### 3.10.9

 * Supported WordPress 7.0.

#### 3.10.8

 * Fixed a bug that sometimes prevented access to the login page.

#### 3.10.7

 * Fixed a mistake in version 3.10.6.

#### 3.10.6

 * Fixed an issue where the URL in the email sent when resetting a password was 
   incorrect when changing the login page.

#### 3.10.5

 * Supported WordPress 6.9.
 * Fixed a bug that sometimes prevented access to the login page.

#### 3.10.4

 * Supported WordPress 6.6.

#### 3.10.3

 * Supported CAPTCHA for login form using ajax.

#### 3.10.2

 * Fixed a mistake in version 3.10.1.

#### 3.10.1

 * Fixed a bug that sometimes prevented login with two-factor authentication.
 * Enhanced the judgment of comment bots.

#### 3.10.0

 * Added option to change author base.
 * Added option to select CAPTCHA type.
 * Enhanced the judgment of comment bots.

#### 3.9.1

 * Fixed a bug where an error message was displayed on the admin screen in PHP 8.2
   or higher.

#### 3.9.0

 * Added two-factor authentication function.
 * Fixed a bug where the login page file created by changing the login page may 
   not be deleted during uninstallation.
 * The REST API URL change feature has been deprecated. If it is currently in use,
   you can continue to use it, but you cannot use it newly.

[See the previous changelogs here](https://xakuro.com/wordpress/xo-security/#changelog)

## Meta

 *  Version **3.10.9**
 *  Zuletzt aktualisiert **vor 7 Tagen**
 *  Aktive Installationen **30.000+**
 *  WordPress-Version ** 4.9 oder höher **
 *  Getestet bis **7.0**
 *  PHP-Version ** 5.6 oder höher **
 *  Sprachen
 * [English (US)](https://wordpress.org/plugins/xo-security/) und [Japanese](https://ja.wordpress.org/plugins/xo-security/).
 *  [Übersetze in deine Sprache](https://translate.wordpress.org/projects/wp-plugins/xo-security)
 * Schlagwörter
 * [Brute Force](https://de.wordpress.org/plugins/tags/brute-force/)[login](https://de.wordpress.org/plugins/tags/login/)
   [maintenance](https://de.wordpress.org/plugins/tags/maintenance/)[security](https://de.wordpress.org/plugins/tags/security/)
   [two factor](https://de.wordpress.org/plugins/tags/two-factor/)
 *  [Erweiterte Ansicht](https://de.wordpress.org/plugins/xo-security/advanced/)

## Bewertungen

 5 von 5 Sternen.

 *  [  11 5-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/xo-security/reviews/?filter=5)
 *  [  0 4-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/xo-security/reviews/?filter=4)
 *  [  0 3-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/xo-security/reviews/?filter=3)
 *  [  0 2-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/xo-security/reviews/?filter=2)
 *  [  0 1-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/xo-security/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/xo-security/reviews/#new-post)

[Alle Rezensionen anzeigen](https://wordpress.org/support/plugin/xo-security/reviews/)

## Mitwirkende

 *   [ ishitaka ](https://profiles.wordpress.org/ishitaka/)

## Support

Möchtest du etwas mitteilen? Brauchst du Unterstützung?

 [Support-Forum anzeigen](https://wordpress.org/support/plugin/xo-security/)