WordPress Disallow
You have better things to do than manage your hosting.
At Host Fortress we normally perform site security checks on all our sites. This scan views potential security risks to the system and checks it against our disallow list. These plugins have been determined to be potential security risks and / or to adversely affect our environments performance.
Our policy is to inform the customer and give them 7 days to remove and/or replace the plugin. We then remove the plugin if it is not resolved.
Complete Disallowed List
Adminer
Asynchronous Google Analytics for WordPress
JetBackup
Backup Scheduler
BackUpWordPress
BackWPup
Bad Behavior
Content Molecules
Contextual Related Posts
DB Cache Reloaded
Duplicator
Dynamic Related Posts
EZPZ One Click Backup
File Commander
Fuzzy SEO Booster
GD Rating System
Google XML Sitemaps with Multisite support
HC Custom WP-Admin URL
Hyper Cache
JR Referrer
Sweet Captcha
Missed Scheduled
Nginx Cache Controller
No Revisions
Ozh' Who Sees Ads
Pipdig Power Pack
Portable phpMyAdmin
Quick Cache
Recommend to a friend
SEO Auto Links & Related Posts
SI CAPTCHA Anti-Spam
Similar Posts
SpamReferrerBlock
Super Post
SuperSlider
Sweet Captcha
CodeTree Backup
Tweet Blender
VersionPress
W3 Total Cache
WP Db Abstraction
WordPress Gzip Compression
WP-Cache
WP Database Optimizer
Database Backup for WordPress
WP-DBManager
WPEngine Snapshot
WP File Cache
WP-phpMyAdmin
WP-PostViews
SlimStat Analytics
WP Super Cache
WP Symposium
Online Backup for WordPress
Caching Plugins
Caching plugins can conflict with our platform’s built-in caching structure. These plugins are known to cause direct conflicts and would ultimately impact your site’s ability to load if used:
- WP File Cache
- W3 Total Cache
Backup Plugins
- WP DB Backup — Needlessly bloats your site’s local storage.
- WP DB Manager — .htaccess protection is recommended, but local storage usage is the major concern as it only offers a local storage option.
- BackupWordPress — Duplicates a large number of files on local storage that are already in our backups.
- VersionPress — In order to function this plugin needs access to server level functions that we disallow for security reasons.
Server & MySQL Thrashing Plugins
- MyReviewPlugin — Slams the database with a significant amount of writes.
- LinkMan — Much like the MyReviewPlugin above, LinkMan utilizes an unscalable amount of database writes.
- Fuzzy SEO Booster — Causes MySQL issues as a site scales up.
- WP PostViews — Inefficiently writes to the database on every page load.
- Tweet Blender — Does not interact well with caching and can cause increased server load.
To track traffic, we recommend Google Analytics.
Related Posts Plugins
- Dynamic Related Posts
- SEO Auto Links & Related Posts
- Similar Posts
- Contextual Related Posts
Duplicate Behavior Plugins
- No Revisions — We disable revisions for all customers by default.
- Force Strong Passwords — We already install & activate this plugin for you.
- Bad Behavior — This plugin attempts to block a number of hosts that we already disallow.
Miscellaneous Plugins
- Hello Dolly!
- WP phpMyAdmin — Disallowed due to a fairly major security issue. We also offer phpMyAdmin access without a plugin from your User Portal.
- Sweet Captcha — After our partners at Sucuri revealed that the Sweet Captcha service was used to distribute adware, we have decided to follow the WordPress Plugin Repo’s lead and ban the plugin outright.
- Digital Access Pass (DAP) — While we do not actively remove this from sites, please be aware that it will not work properly on our platform due to its use of PHP Sessions and System-level crons. Instead, we recommend using one of the other highly-rated Membership plugins like Paid Memberships Pro, Restrict Content, or S2Member.
Additional Scripts
- TimThumb — Older versions of TimThumb are known to contain vulnerabilities. When our system scan identifies an older version, it will automatically update the script. After the upgrade has been completed, the system will notify you by email.
- Uploadify — Access to this script is blocked due to known security threats. The reasoning behind this was largely informed by this blog post from our partners at Sucuri.
Check out our control panel hosting
If you need Cpanel or Plesk to have more control over your website, check out our control panel hosting.