Skip to content
Just updated71 new versions in the last 24 hoursDownloads left today: of of leftNo downloads left today · Resets in h
Wordfence Security Premium plugin cover image

PluginUpdated

Wordfence Security Premium

by Wordfencev9.0.2Unlimited sites

Wordfence Security Premium by Wordfence is a WordPress security plugin that combines an endpoint firewall with a malware scanner.

Product facts

Version
9.0.2
Released
2 October 2026
Type
Plugin
Licence
GPL
Included in
Every plan, or $9.09 / year on its own

Overview

A WordPress site faces constant attempts to guess passwords, post spam and slip in malicious code. Wordfence Security Premium addresses these problems in one plugin. Its firewall works at the endpoint and filters malicious traffic before it reaches your site, while a real-time threat defense feed keeps the firewall and scanner informed about new and changing threats.

The scanner looks for backdoors, trojans, phishing URLs and suspicious code. Login security, spam blocking and country blocking limit who can reach your site and what they can submit. A dashboard shows security alerts, live traffic and reports, so you can follow what is happening without expert-level knowledge. It fits personal blogs, online stores and business sites alike.

Features

  • Endpoint firewall: The firewall blocks malicious traffic before it reaches your site, and a real-time threat defense feed keeps it informed about new and evolving threats.
  • Malware scanning: The scanner detects backdoors, trojans, phishing URLs and suspicious code, helping you find and remove threats that have landed on your site.
  • Login security: Two-factor authentication and reCAPTCHA help prevent brute force attacks and unauthorized access attempts on your WordPress login.
  • Spam blocking: Spam blocking keeps spam comments and malicious content from reaching your site, which helps keep your published content clean.
  • Country blocking: Restrict access from countries you consider high risk, which reduces the number of places attacks can come from.
  • Real-time IP blacklist: IP addresses known for malicious activity around the world are blocked automatically, so you do not have to track them by hand.
  • Scheduled scans: Scans can run on a schedule, so security checks happen on time without you starting each one manually.
  • Dashboard and reports: View security alerts, watch live traffic and read detailed summaries of your site's security status and incidents from one dashboard.

Best for

  • Personal bloggers who want straightforward WordPress protection
  • Online store owners guarding logins and customer-facing pages
  • Business sites needing scans, alerts and security reports

Changelog

Version 9.0.2 — 30 September 2026

  • Improved Changed IPv6 diagnostics result to be informational only
  • Improved Added help link to increased attack rate emails
  • Improved Increased compatibility with WordPress Playground
  • Improved Harden REST API user enumeration protection
  • Fixed Upgraded virtualizer dependency to fix Firefox tab crash on screens with a lot of DOM elements (e.g., a running scan)
  • Fixed Better detection and handling of "module" script tagging to avoid conflict with renamed plugin directories
  • Fixed Add missed return value from `upgrader_pre_install` audit log filter
  • Fixed PHP 8.1 deprecation notice fixes
  • Fixed Fixed translation support on login page
  • Fixed Improve handling of WAF JSON processing to better handle array values
  • Fixed Address early translation calls to avoid `_load_textdomain_just_in_time` notices
  • Fixed Changed a few translated strings to avoid containing HTML due to a broken CZ translation
  • Fixed Removed obsolete CSS
  • Fixed Fixed typo in "No alerts will be sent for the remain[d]er..."

Earlier versions

  • 9.0.1 (8 September 2026): 2 improved, 4 fixed
  • 9.0.0 (10 August 2026): 5 improved, 5 fixed
  • 8.2.2 (13 May 2026): 6 improved, 4 fixed, 1 removed

FAQ

Is Wordfence Security Premium free?

The code of Wordfence Security Premium is licensed under the GPL, so anyone may use, change and share it. Buy GPL is a paid service: a plan or a purchase of Wordfence Security Premium gives you the download and its updates. The developer's own support, licence key and online services are not included.

Which version of Wordfence Security Premium is this?

Version 9.0.2, released 2 October 2026. New versions appear here when the developer publishes them.

How do I update Wordfence Security Premium?

Install Buy GPL Updater on your site and paste your key from My Account. It installs new versions of Wordfence Security Premium for you.