Source evidence

Useless, just detects basic login forms

Wordfence Login Security · review · 2022-07-01T11:50:00+00:00

Wordfence Login Security plugin evidence original source source API

complaintsentiment

highseverity

1.0relevance

2replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

review · 1 stars

Manuel Camargo unresolved

Cannot verify logins coming from wp_login_form within the frontend rendering it almost useless except for extremely simple sites. Thanks for reaching out. We’ve been working on adding this for a bit. WfLS version 1.1.0 has a case for adding a 2FA setup shortcode so sites can add it on custom profile pages. Thinking about Woocommerce sites is what prompted the work but other situations like BuddyPress/BuddyBoss would be applicable as well. WfLS version 1.1.0 is scheduled in January but I’m not sure if the work on this has started already. QA testing and fixing any issues that arise could delay that date. Tim Just to update this – we now support Woocommerce and other plugins that do their own thing when it comes to logins. We have included a shortcode that can be added so that you can put it in users’ accounts. You can read more about it here: https://www.wordfence.com/help/login-security/#woocommerce-and-custom-integrations Mia

Commercial Context

Opportunity

trust and abuse-prevention operations

Security abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: Useless, just detects basic login forms: users show security, bugs, compatibility pain that may indicate a product gap.

Evidence quote: Useless, just detects basic login forms Cannot verify logins coming from wp_login_form within the frontend rendering it almost useless except for extremely simple sites.

Affected feature: form

security bugs compatibility missing feature

Plugin

API

Wordfence Login Security

70.0K active installs · 1.3M downloads · rating 78.0

2fa captcha login security security two factor authentication

Comments

2 shown

WFSupport 2022-11-29T13:40:00+00:00

Thanks for reaching out. We’ve been working on adding this for a bit. WfLS version 1.1.0 has a case for adding a 2FA setup shortcode so sites can add it on custom profile pages. Thinking about Woocommerce sites is what prompted the work but other situations like BuddyPress/BuddyBoss would be applicable as well. WfLS version 1.1.0 is scheduled in January but I’m not sure if the work on this has started already. QA testing and fixing any issues that arise could delay that date. Tim

WFSupport 2023-03-01T14:24:00+00:00

Just to update this – we now support Woocommerce and other plugins that do their own thing when it comes to logins. We have included a shortcode that can be added so that you can put it in users’ accounts. You can read more about it here: https://www.wordfence.com/help/login-security/#woocommerce-and-custom-integrations Mia