WordPress plugin intelligence profile

xZeroProtect

Lightweight firewall for WordPress — blocks bots and scanners, tracks real visitor analytics with zero external dependencies.

WP PlugIndex snapshot

Current directory snapshot

Tested up to WordPress 7.0
Current version1.2.0
WordPress coverageTested up to WordPress 7.0
Minimum stackWP 6.0 · PHP 8.0
Directory statusactive
Last directory update15 Oct 202617d ago
Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org

Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →

WP PlugIndex currently records xZeroProtect version 1.2.0 as active, updated 17d ago and tested up to WordPress 7.0.

Overview

About this plugin

xZeroProtect brings the power of the xZeroProtect PHP library to WordPress with a clean admin dashboard. com/webrium/xzeroprotect-wp.

What it does:

  • Blocks bots, scanners, and common web attacks (SQLi, XSS, path traversal, command injection)
  • Rate-limits IPs and automatically bans repeat offenders
  • Verifies legitimate crawlers (Googlebot, Bingbot) via double-DNS — they’re never blocked
  • Tracks real visitor analytics — bot traffic is already filtered out before anything is recorded
  • Shows unique visitors, top pages, device breakdown, and block reasons in a dashboard
  • Zero external dependencies — no Redis, no external API, everything on disk and in your database

Dashboard includes:

  • Traffic overview chart (visits, unique visitors, blocked)
  • Top pages by hits and unique visitors
  • Device breakdown (desktop / mobile / tablet)
  • Block reason breakdown
  • Real visitor log with browser, OS, and device info
  • Blocked request log with attack type and reason

Privacy Policy

xZeroProtect stores visitor data (IP address, browser, OS, device type) and blocked

request data locally in your WordPress database. No data is transmitted to external

servers. All stored data is automatically deleted after the configured retention period

(default: 30 days). All data is permanently removed when the plugin is uninstalled.

WordPress.org metadata

Plugin tags

Topics listed for this plugin in the WordPress.org directory.

  • bot protection
  • analytics
  • firewall
  • security
  • waf
Compatibility & maintenance

Compatibility & maintenance

Tested up to WordPress 7.0

Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 7.0.

Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.0
Minimum requirementsWordPress 6.0 · PHP 8.0
Update activity15 Oct 202617d ago

“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.

Changes recorded by WP PlugIndex

Recent tracked changes

Version1.1.41.2.0
WordPress compatibility7.0.47.0.7
Tracking & source

WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.

Plugin watchlist

Watch this plugin

Sign in to your WP PlugIndex account or create a free account. Free accounts can watch up to 5 plugins and see what changed.

Watch limit

Watchlist limit reached

You have reached your current active watch limit.