Plugin
PluginUpdated
Wordfence Security Premium
Wordfence Security Premium by Wordfence is a WordPress security plugin for site owners who want tools to monitor and defend their websites.
Product facts
- Version
- 9.0.2
- Released
- 2 October 2026
- Type
- Plugin
- Licence
- GPL
- Included in
- Every plan, or $10.99 / year on its own
Overview
The plugin helps site owners manage common security risks from one place. Its firewall blocks malicious traffic, while the malware scanner checks for backdoors, trojans, phishing URLs, and suspicious code. Spam blocking and login protections add further safeguards against unwanted content and unauthorized access attempts.
Use the dashboard to review security alerts, monitor live traffic, and check site status. The plugin also offers scheduled scans and updates, country blocking, and an IP blacklist that blocks addresses associated with malicious activity. It suits personal blogs, online stores, and business websites built with WordPress.
Features
- Firewall protection: Blocks malicious traffic before it reaches your site, with threat intelligence that informs the firewall's defenses.
- Malware scanning: Scans for backdoors, trojans, phishing URLs, and suspicious code that may affect your WordPress site.
- Spam blocking: Helps prevent spam comments and malicious content from appearing on your website.
- Login security: Uses two-factor authentication and reCAPTCHA to help prevent brute force attacks and unauthorized access.
- Traffic and alerts: Review security alerts and monitor live traffic through a dashboard with security information and actionable insights.
- Access controls: Block access from selected countries and automatically block IP addresses known for malicious activity.
- Scheduled checks: Set scans and updates to run on a schedule, helping you keep security checks and defenses current.
Best for
- WordPress blog owners
- Online store operators
- WordPress business websites
Changelog
Version 9.0.2 — 30 September 2026
- Improved Changed IPv6 diagnostics result to be informational only
- Improved Added help link to increased attack rate emails
- Improved Increased compatibility with WordPress Playground
- Improved Harden REST API user enumeration protection
- Fixed Upgraded virtualizer dependency to fix Firefox tab crash on screens with a lot of DOM elements (e.g., a running scan)
- Fixed Better detection and handling of "module" script tagging to avoid conflict with renamed plugin directories
- Fixed Add missed return value from `upgrader_pre_install` audit log filter
- Fixed PHP 8.1 deprecation notice fixes
- Fixed Fixed translation support on login page
- Fixed Improve handling of WAF JSON processing to better handle array values
- Fixed Address early translation calls to avoid `_load_textdomain_just_in_time` notices
- Fixed Changed a few translated strings to avoid containing HTML due to a broken CZ translation
- Fixed Removed obsolete CSS
- Fixed Fixed typo in "No alerts will be sent for the remain[d]er..."
Earlier versions
- 9.0.1 (8 September 2026): 2 improved, 4 fixed
- 9.0.0 (10 August 2026): 5 improved, 5 fixed
- 8.2.2 (13 May 2026): 6 improved, 4 fixed, 1 removed
FAQ
Is Wordfence Security Premium free?
The code of Wordfence Security Premium is licensed under the GPL, so anyone may use, change and share it. GPL 247 is a paid service: a plan or a purchase of Wordfence Security Premium gives you the download and its updates. The developer's own support, licence key and online services are not included.
Which version of Wordfence Security Premium is this?
Version 9.0.2, released 2 October 2026. New versions appear here when the developer publishes them.
How do I update Wordfence Security Premium?
Install GPL 247 Updater on your site and paste your key from My Account. It installs new versions of Wordfence Security Premium for you.






