Title: CoxWall
Author: themelooks
Published: <strong>2026 年 6 月 12 日</strong>
Last modified: 2026 年 6 月 12 日

---

搜索插件

![](https://ps.w.org/coxwall/assets/banner-772x250.png?rev=3570395)

![](https://ps.w.org/coxwall/assets/icon-128x128.gif?rev=3570391)

# CoxWall

 作者：[themelooks](https://profiles.wordpress.org/themelooks/)

[下载](https://downloads.wordpress.org/plugin/coxwall.1.0.0.zip)

 * [详情](https://cn.wordpress.org/plugins/coxwall/#description)
 * [评价](https://cn.wordpress.org/plugins/coxwall/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/coxwall/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/coxwall/#developers)

 [支持](https://wordpress.org/support/plugin/coxwall/)

## 描述

CoxWall is a powerful and lightweight WordPress security plugin designed to protect
your website from modern security threats, brute-force attacks, malware attempts,
and unauthorized access.

It provides advanced security tools including firewall protection, login hardening,
security headers, file integrity monitoring, WooCommerce security, and detailed 
audit logging — all in an easy-to-use interface.

Whether you run a blog, business website, membership platform, or WooCommerce store,
CoxWall helps keep your WordPress site secure and protected in real time.

**Key Features:**

 * **Login Protection** – Limit login attempts per IP, lock out attackers, and receive
   email alerts.
 * **Hide Login** – Move your login URL away from the default `wp-login.php`.
 * **CAPTCHA** – Google reCAPTCHA v2 / v3 on login, registration, and WooCommerce
   forms.
 * **Firewall** – Block SQLi, XSS, directory traversal, malicious bots, and XML-
   RPC abuse.
 * **Security Headers** – Set X-Frame-Options, CSP, HSTS, Referrer-Policy, and more.
 * **File Integrity** – Detect changes to WordPress core and plugin files.
 * **WooCommerce** – Extra security for WooCommerce stores.
 * **Audit Log** – Full event log with IP, user, and timestamp for every security
   event.

**Why Choose CoxWall?**

 * Lightweight and performance-friendly
 * Beginner-friendly setup
 * Modern security protection
 * WooCommerce compatible
 * Advanced firewall system
 * Detailed security logging
 * Real-time protection and monitoring

**CoxWall** helps you secure your WordPress website with enterprise-level protection
while keeping the setup simple and user-friendly.

**Features:**

 * **Login Protection**
 * **Hide Login URL**
 * **Google reCAPTCHA v2 / v3**
 * **Firewall Protection**
 * **SQL Injection (SQLi) Blocking**
 * **XSS Attack Protection**
 * **Directory Traversal Protection**
 * **Malicious Bot Blocking**
 * **XML-RPC Protection**
 * **Security Headers Management**
 * **Content Security Policy (CSP)**
 * **HSTS Support**
 * **Referrer Policy Protection**
 * **File Integrity Monitoring**
 * **Core File Change Detection**
 * **Plugin File Change Detection**
 * **WooCommerce Security**
 * **Audit Log System**
 * **IP Activity Logging**
 * **User Activity Tracking**
 * **Real-time Security Alerts**
 * **Email Notifications**
 * **Brute-force Protection**
 * **Login Attempt Limiting**
 * **IP Lockout System**
 * **Malware Defense**
 * **Website Hardening**
 * **Real-time Monitoring**
 * **WordPress Security Suite**

### External services

This plugin optionally connects to the following third-party / external services.
Each service is only contacted when its corresponding module is enabled and the 
described conditions are met.

#### Google reCAPTCHA (Google LLC)

**What it is and what it is used for:**
 Google reCAPTCHA is a bot-detection service.
CoxWall uses it to protect the WordPress login, registration, lost-password, comment,
and WooCommerce My Account forms from automated attacks.

**What data is sent and when:**
 When the CAPTCHA module is enabled, two types of
requests are made to Google:

 1. _Front-end (page load)_ – the visitor’s browser loads the reCAPTCHA JavaScript 
    library directly from Google’s CDN (`www.google.com`). Google receives the visitor’s
    IP address, browser and device information, and the site’s public reCAPTCHA site
    key.
 2. _Back-end (form submission)_ – when a visitor submits a protected form, the plugin
    sends the reCAPTCHA response token, the site’s secret key, and the visitor’s IP
    address to Google’s verification endpoint (`www.google.com/recaptcha/api/siteverify`)
    to confirm the response is valid.

No data is sent if the CAPTCHA module is disabled or if no reCAPTCHA site/secret
key has been configured.

**Service provider links:**
 * Terms of Service: https://policies.google.com/terms*
Privacy Policy: https://policies.google.com/privacy * reCAPTCHA-specific information:
https://developers.google.com/recaptcha

#### WordPress.org Core Checksums API (WordPress.org)

**What it is and what it is used for:**
 The WordPress.org Checksums API provides
official MD5 hashes for every file in each WordPress core release. CoxWall’s File
Integrity module uses these hashes to detect unauthorized modifications to core 
files.

**What data is sent and when:**
 When a file integrity scan runs (manually triggered
or on schedule), the plugin sends a GET request to `https://api.wordpress.org/core/
checksums/1.0/` containing:

 * The installed WordPress version number.
 * The site’s configured locale/language.

No personal data, user data, or site content is transmitted. The request retrieves
a publicly available checksum list.

**Service provider links:**
 * Privacy Policy: https://wordpress.org/about/privacy/*
API documentation: https://codex.wordpress.org/WordPress.org_API

## 屏幕截图

[[

[[

[[

[[

## 安装

 1. Upload the `coxwall` folder to `/wp-content/plugins/`.
 2. Activate the plugin through the **Plugins** menu in WordPress.
 3. Navigate to **CoxWall  Dashboard** to configure.

## 评价

此插件暂无评价。

## 贡献者及开发者

「CoxWall」是开源软件。 以下人员对此插件做出了贡献。

贡献者

 *   [ themelooks ](https://profiles.wordpress.org/themelooks/)

[帮助将「CoxWall」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/coxwall)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/coxwall/)，查看[SVN仓库](https://plugins.svn.wordpress.org/coxwall/)，
或通过[RSS](https://plugins.trac.wordpress.org/log/coxwall/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/coxwall/)。

## 更新日志

#### 1.0.0

 * Initial release.

## 额外信息

 *  版本 **1.0.0**
 *  最后更新：**6 天前**
 *  活跃安装数量 **不到10**
 *  WordPress 版本 ** 6.8 或更高版本 **
 *  已测试的最高版本为 **7.0**
 *  PHP 版本 ** 8.0 或更高版本 **
 *  语言
 * [English (US)](https://wordpress.org/plugins/coxwall/)
 * 标签
 * [Brute Force](https://cn.wordpress.org/plugins/tags/brute-force/)[firewall](https://cn.wordpress.org/plugins/tags/firewall/)
   [login protection](https://cn.wordpress.org/plugins/tags/login-protection/)[malware](https://cn.wordpress.org/plugins/tags/malware/)
   [security](https://cn.wordpress.org/plugins/tags/security/)
 *  [高级视图](https://cn.wordpress.org/plugins/coxwall/advanced/)

## 评级

尚未提交反馈。

[Your review](https://wordpress.org/support/plugin/coxwall/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/coxwall/reviews/)

## 贡献者

 *   [ themelooks ](https://profiles.wordpress.org/themelooks/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/coxwall/)