/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ WP Ghost (Hide My WP Ghost) – Security & Firewall

WP Ghost (Hide My WP Ghost) – Security & Firewall

By John Darrel

Security & Privacy / Security Scanning & Malware Protection

WP Ghost (Hide My WP Ghost) – Security & Firewall Review - In-Depth Analysis

WP Ghost is a comprehensive security plugin for WordPress. It hides and secures common paths, protects against brute force attacks, and offers multiple layers of security. Ideal for safeguarding your website from hackers.

Performance Overview

WPS Score

6.74/10

User Rating

4.5/5 (based on 371+ reviews)

Active Installations

100,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5.39 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Level up your WordPress security with WP Ghost plugin!

WP Ghost (short for Hide My WP Ghost) is a comprehensive hack-prevention security solution for WordPress websites. It adds multiple layers of security to block hacker bots and prevent unauthorized access.

It works by changing and hiding common vulnerabilities, making it difficult for bots and hackers to exploit weak points in plugins, themes, and the WordPress core itself.

Join over 200,000 secured websites with WP Ghost. The plugin has blocked over 9 million brute force attempts and stopped over 140,000 monthly hacks.

Key features include powerful protection against various attacks. Protect your site today! WP Ghost hides and secures all common paths, plugins and themes from hacker bots and spammers.

WP Ghost is packed with over 50 security free features. It includes options to change and hide paths, a robust firewall, and brute force protection mechanisms.

Compatible server types include WP Multisite, Apache, Litespeed, Nginx, and Windows IIS. The plugin works with other security plugins and adds a layer of security to your WordPress website against hacker bots.

Protect your WordPress website by hiding the authentication paths and changing common WordPress paths. Secure your website in just minutes with the WP Ghost plugin.

Comparing to Alternatives

WP Ghost (Hide My WP Ghost) offers a unique approach to WordPress security by focusing on hiding and obfuscating core site elements to prevent attacks. Compared to other security plugins, it emphasizes stealth and customization of paths and login pages.

Top alternatives

Strengths

Effectively hides WordPress core paths and login pages to reduce attack surface.
Customizable paths for wp-content and other directories to make site appear unique.
Excellent and responsive customer support with real solutions.
Lightweight and does not noticeably affect site speed.
Pro version includes detailed bot logs and advanced protection features.

Weaknesses

Can override configurations of other security plugins, potentially causing conflicts.
Compatibility issues reported with some server environments like NGINX and IIS.
Lacks built-in malware scanning and automatic IP blocking features.
Some users report difficulty with setup on complex hosting setups.

User Sentiment Analysis

User feedback highlights the plugin's effectiveness in security and support quality, though some concerns about compatibility and plugin conflicts exist.

Positive highlights

"The support team is excellent; they promptly provided solutions." – sebastian
"Pro version allows viewing logs and identifying rogue bots." – Adrian McMaster
"Has always worked flawlessly alongside caching and SEO plugins." – uknew
"No hacked sites and particularly fast support." – Groovyx9
"Easy to follow guide and achieved A+ security score." – sofasurfer75

Common complaints

Overrides existing security plugin configurations causing conflicts.
Compatibility issues with NGINX servers and some hosting environments.
Lack of malware scanning and automatic IP filtering features.
Some users find setup challenging on certain server setups.

Weaknesses

Potential to break other security plugins by overriding settings.
Not fully compatible with all server types, especially NGINX and IIS.
No integrated malware scanner included.
Limited automatic threat filtering in free version.

Who Should Use This?

Best for

Website owners looking for a stealth-based security solution that hides WordPress core elements and login pages to reduce attack vectors. Ideal for those who want lightweight protection with excellent support and are comfortable with some configuration.

Not ideal for

Users who rely heavily on multiple security plugins simultaneously or those needing integrated malware scanning and automatic IP blocking. Also not ideal for sites hosted on NGINX or IIS servers without additional configuration expertise.

Pricing & Value

Free version includes

The free version offers core features like hiding login pages and customizing WordPress paths to enhance security without slowing down the site.

Pro version (29.99 - 119.99 USD / year)

Includes advanced features such as detailed bot logging with IP addresses, enhanced firewall rules, compatibility fixes, and priority support to protect against rogue bots and sophisticated attacks.

Final Verdict

WP Ghost (Hide My WP Ghost) is a strong security plugin that excels in obscuring WordPress core elements to reduce attack surfaces, backed by responsive and knowledgeable support. It is lightweight and effective, making it a valuable tool for many WordPress site owners.

However, users should be cautious of potential conflicts with other security plugins and compatibility issues on certain server environments. Those needing comprehensive malware scanning or automatic IP blocking may need to supplement with additional tools. Overall, it is a solid choice for stealth-focused WordPress security.

Other Notable Features

Here are a few other notable features of this free WP Ghost (Hide My WP Ghost) – Security & Firewall plugin.

Firewall

Hide

Security

Wp-admin

Screenshots

FAQ

Yes, the plugin works on WP Multisite and you will configure it for the entire network.

The plugin also works with Apache, Nginx, IIS, and LiteSpeed servers

By default, WP Ghost changes the paths only in frontend.

We don’t recommend this but if you want to change the path also in the admin dashboard, add this line in wp-config.php file

define('HMW_ALWAYS_CHANGE_PATHS', true);

Save the settings in WP Ghost and the WordPress paths will be changed in admin backend area.

Contributors and developers

“WP Ghost (Hide My WP Ghost) – Security & Firewall” is open source software. The following people have contributed to this plugin.

John Darrel

Pro version Free Version Docs Live Demo

WPS

6.74

Average

Pro version

Ratings

4.5 out of 5 | 371

Version

7.0.02

Last updated

6 days ago

Active installations

100,000+

WordPress version

7.0 or higher

PHP version

7.4 or higher

Languages

Other plugins you might like

Wordfence Security – Firewall, Malware Scan, and Login Security

By Mark Maunder

WPS

7.57

Very Good

4.7/5

4.9k+reviews

5M+

active installation

Tested with

7.0

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

By Really Simple Plugins

WPS

7.56

Very Good

4.9/5

8.8k+reviews

3M+

active installation

Tested with

7.0

All-In-One Security (AIOS) – Security and Firewall

By David Anderson / Team Updraft

WPS

7.28

Very Good

4.7/5

1.7k+reviews

1M+

active installation

Tested with

7.0

Defender Security – Malware Scanner, Login Security & Firewall

By WPMU DEV - Your All-in-One WordPress Platform

WPS

6.71

Average

4.8/5

333+reviews

90k+

active installation

Tested with

7.0

Security Ninja – WordPress Security & Firewall

By cleverplugins

WPS

6.91

Average

4.6/5

99+reviews

7k+

active installation

Tested with

7.0

WP Ghost (Hide My WP Ghost) – Security & Firewall Review - In-Depth Analysis

Performance Overview

What It Does

Comparing to Alternatives

User Sentiment Analysis

Who Should Use This?

Pricing & Value

Final Verdict

Other Notable Features

Screenshots

FAQ

Contributors and developers

Ratings

Reviews (371)

Sort by:

Contributors & Developers

Interested in development?

Changelog

Security Status

Secure

No Unpatched Vulnerabilities

Known Vulnerabilities (8)

WPS

6.74

Other plugins you might like

Wordfence Security – Firewall, Malware Scan, and Login Security

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

All-In-One Security (AIOS) – Security and Firewall

Defender Security – Malware Scanner, Login Security & Firewall

Security Ninja – WordPress Security & Firewall