Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records DawsonyWeb Spam Protection and API Hardening version 1.3.4 as active, updated 6d ago and tested up to WordPress 7.1.
Overview
About this plugin
Stop comment spam and close off parts of WordPress that bots abuse, without installing a heavy security suite. Block spam comments with a honeypot and simple rules, disable XML-RPC, hide user details from the REST API and block problem IP addresses. It is not a malware scanner or firewall, and it doesn’t pretend to be.
Comment Protection
Master switch to completely disable all comments (form, REST API, XML-RPC, feeds)
Hide /wp/v2/users endpoints from guests while keeping them available to signed-in users
Require authentication for all REST API requests
Optionally disable the REST API completely
Block author enumeration via /?author=N
Spam Rules
Per-IP comment rate limiting (configurable max and time window)
IP address blocklist – blocked IPs receive a 403 on any front-end request
Rolling activity log (last 200 events)
Privacy
When activity logging is enabled, the plugin stores up to 200 blocked-event entries locally, including IP address, time and reason. Administrators can clear the log or turn logging off. Comment rate limits use temporary counters.
No log data is sent to DawsonyWeb or a third-party service. Uninstalling removes the plugin settings, logs and rate-limit transients.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
disable xml rpc
xml rpc
rest api
antispam
security
spam
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 6.0 · PHP 8.0
Update activity26 Oct 20266d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
Version1.3.3→1.3.4
WordPress compatibility7.1.3→7.1.4
Version1.3.2→1.3.3
Version1.3.1→1.3.2
Version1.3.0→1.3.1
WordPress compatibility7.1.2→7.1.3
Version1.2.0→1.3.0
Version1.1.1→1.2.0
WordPress compatibility7.0.5→7.1.2
Version1.1.0→1.1.1
WordPress compatibility7.0.4→7.0.5
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
