Ben Huson

See https://wordpress.org/support/topic/incorrect-error-message-3/

See: https://docs.wp-rocket.me/article/1313-create-different-cache-files-with-dynamic-and-mandatory-cookies For possible solution see: https://docs.wp-rocket.me/article/1313-create-different-cache-files-with-dynamic-and-mandatory-cookies

Login page should not be indexable

2

https://wordpress.org/support/topic/disallow-searchengine/ ``

As they could show site content: https://wordpress.org/support/topic/404-should-be-redirected/

https://wordpress.org/support/topic/allow-ip-addresses-list-with-notations-or-comments/

Allow for whitelisting of domains as well as IP addresses.

1

PR for #58

Add whitelisting for domains as well as IP addresses.

1

See: https://wordpress.org/support/topic/vulnerability-open-redirect?replies=4#post-7607960

Solution for WP Engine issues

11

Password Protected will not work with WP Engine due to their page caching. Suggestion is to implement a Javascript redirection fallback and display a message to users in admin. Also...

https://wordpress.org/plugins/theme-my-login/ https://wordpress.org/support/topic/theme-my-login-integration-1?replies=1