Title: WEDOS | Protection & Cache Performance Author: wedos.com Published: 26 septembre 2023 Last modified: 15 octobre 2026 --- Recherche d’extensions ![](https://ps.w.org/wgpwpp/assets/banner-772x250.png?rev=3000657) ![](https://ps.w.org/wgpwpp/assets/icon.svg?rev=2971707) # WEDOS | Protection & Cache Performance Par [wedos.com](https://profiles.wordpress.org/wedos/) [Télécharger](https://downloads.wordpress.org/plugin/wgpwpp.2.3.1.zip) * [Détails](https://fr-ca.wordpress.org/plugins/wgpwpp/#description) * [Avis](https://fr-ca.wordpress.org/plugins/wgpwpp/#reviews) * [Installation](https://fr-ca.wordpress.org/plugins/wgpwpp/#installation) * [Développement](https://fr-ca.wordpress.org/plugins/wgpwpp/#developers) [Support](https://wordpress.org/support/plugin/wgpwpp/) ## Description Activate WEDOS Global protection — WAF, DDoS protection and CDN for your WordPress website. ### WEDOS Global (CDN Cache & Security) WEDOS Global Protection plugin helps site administrators activate WEDOS.protection from inside WordPress. The plugin provides a simple landing page for non-technical users, guided website and DNS setup, a dashboard with protection status, and a consent step before any external service activation request is sent. ### Cloud WAF & DDoS Protection By filtering traffic and blocking harmful cyberattacks on cloud servers, our WAF provides protection for your WordPress websites without putting any extra load on your local resources. ### Global CDN Cache The WEDOS Global CDN will ensure a significant increase of your WordPress loading speed, and better overall server response all around the world. ### Links to Documentation and Other Sources * [WEDOS Global](https://www.wedos.com/protection/) * [Knowledge Base](https://kb.wedos.com/en/kategorie/wedos-global-en/) * [Community Help](https://help.wedos.com) ### External Services This plugin connects to the following external services: **WEDOS Global Protection (plugin.wedos.global)** * Verify domain ownership via a local verification file * Register and activate the domain protection service * Check the protection and DNS status Data sent: domain name, server IP address, admin email address, unique request ID, and this installation’s private API key (proves the request comes from this site; only its SHA-256 hash is published in the verification file). No personal visitor data is ever transmitted. **WEDOS CDN (wp-cdn.wedos.com)** * Serves WordPress core and WooCommerce static assets (JS, CSS) from WEDOS CDN edge nodes * Fetches a manifest file listing available asset versions and their SHA-256 hashes * Assets are only rewritten when local file hash matches the CDN manifest — no data about visitors is transmitted * CDN is opt-in and can be disabled at any time from the dashboard **Anonymous telemetry (plugin.wedos.global/cdn-plugin/telemetry.php)** * Sends anonymous usage statistics once daily when opted in: plugin version, WordPress version, rewrite count * No domain name, no IP address, no personal data is included **Subscription management (plugin.wedos.global)** * Used only when you start a free trial or subscribe to a paid plan (Standard, Premium) * Data sent: domain name, admin email address, selected plan identifier * Subscription status is queried periodically to determine which paid features ( e.g. detailed visitor geography) are unlocked * The free plan does not require any subscription data exchange **Vulnerability intelligence feed (utils.wedos.tools/vulns)** * Downloads a database of publicly known WordPress vulnerabilities (compiled from the Wordfence Intelligence feed, CC BY-ND 4.0) once daily * The comparison with your installed plugins, themes and WordPress core runs entirely locally on your server * Data sent: none beyond a standard HTTP request (no domain, no site data, no list of your plugins is ever transmitted) **Website performance check (utils.wedos.tools/api/v1/performance/)** * Once daily measures your website’s public loading speed (TTFB, total time) from the WEDOS infrastructure for the Site Snapshot card * Data sent: your domain name only **Recommendations feed (plugin.wedos.global/recommendations/)** * Downloads the list of WEDOS recommendations hourly; it is signed and verified before use, and contains only data, never code * Whether a recommendation applies is measured locally on your server; nothing is applied until you confirm it * Data sent when downloading: none beyond a standard HTTP request * When you confirm, ignore or undo a recommendation on a site registered with WEDOS Protection, the plugin reports the decision: domain name, recommendation ID, your decision, and the number and average duration of matching requests in the last 24 hours **Billing provider (FastSpring)** * When you purchase a paid plan, your order is processed by FastSpring (fastspring. com) * FastSpring acts as the merchant of record for the transaction * See FastSpring’s privacy policy for details on data they collect during checkout ### Bundled Third-Party Libraries The plugin ships with the following open-source libraries (no external network calls— all bundled locally): **Chart.js 4.4.0** (MIT license) * Used for analytics charts (requests over time, top countries bars) * Source: https://www.chartjs.org/ * License: https://github.com/chartjs/Chart.js/blob/master/LICENSE.md **jsvectormap 1.7.0** (MIT license) * Used to render the interactive world map in the Visitor Geography section (paid feature only — loaded when geographic analytics are unlocked by the active plan) * Source: https://github.com/themustafaomar/jsvectormap * Map data renders aggregated country traffic counts received from the WEDOS Global Protection backend; no visitor data is sent anywhere * License: https://github.com/themustafaomar/jsvectormap/blob/master/LICENSE The service is provided by WEDOS Group SA, 7 Rue Robert Stumper, L-2557 Luxembourg, EU. * [Terms of Service](https://www.wedos.com/en/terms-of-service/) * [Privacy Policy](https://www.wedos.com/en/privacy-policy/) By activating the plugin and clicking « Create request », you explicitly consent to your domain data being sent to the WEDOS Global Protection service. ### Bundled third-party libraries All executable code ships inside the plugin package; nothing is loaded from external servers by default. For code review purposes, the bundled minified libraries and their unminified sources: * **Chart.js 4.4.0** (MIT) — standard upstream UMD build, unmodified. File: `assets/ vendor/wedos-chart.umd.min.js` (renamed copy of `chart.umd.min.js`). Source: https://github.com/chartjs/Chart.js/releases/tag/v4.4.0 * **jsVectorMap** (MIT, license file bundled alongside) — standard upstream build plus the world map data file. Files: `assets/vendor/jsvectormap/`. Source: https:// github.com/themustafaomar/jsvectormap * **WEDOS vulnerability matcher** (`includes/Vuln/`) — our own unminified GPL code, no third-party origin. Optionally, the two UI libraries above can be served from the WEDOS CDN instead of the local copies. This is part of the documented WEDOS CDN service, is disabled by default, requires the user to enable it, and every CDN-served file carries a Subresource Integrity hash with an automatic fallback to the bundled local copy. **Free plan and trials:** the plugin itself is fully functional free of charge. Paid features (such as the detailed visitor geography or targeted-path analytics) are capabilities of the hosted WEDOS Protection service, not of the plugin code. When a trial of the hosted service ends, the plugin keeps working on the free plan; no plugin functionality is time-locked. ## Captures d’écran [[ [[ [[ [[ [[ [[ ## Installation 1. Upload the plugin files to the /wp-content/plugins/wgpwpp directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the plugin through the ‘Plugins’ screen in WordPress 3. Let the plugin guide you through the service setup process ## Avis ![](https://secure.gravatar.com/avatar/f63303e10c3332d2496b24b20e59e7843e899065b4875674111a9d5f695d753f? s=60&d=retro&r=g) ### 󠀁[Nedoporucuju](https://wordpress.org/support/topic/nedoporucuju/)󠁿 [W.L.K.](https://profiles.wordpress.org/wlk-1/) 23 juillet 2025 Protoze se nektere stranky nacitaly klidne 4s prestoze staticke cachovani bylo zapnute, tak jsem plugin deaktivoval. Bezel tam web s nizkym poctem obrazku, slusne nakodovany ve zkompilovanem tailwindu, bez elementoru a podobnych ***, nijak vysoky pocet statickych souboru. Po vypnuti pluginu jsem nastavil WP fastest cache a paradoxne se nacita rychleji nez s wedos CDN. Co tam bylo za problem netusim, dam tomu sanci jeste za rok za dva. Nicmene chybi nejaky tarif kde bych si mohl nastavit vice lokalit, protoze momentalne prichazi v uvahu 300,- bez dph / mesic (pouze nektere lokality, prakticky zadne vlastni nastaveni) a 2000,- bez dph / mesic (??). Za dva litry mesicne uz muzu mit vlastni cloudfront s offloadem statickych souboru do s3, a to mi jeste celkem dost zustane (a to do te ceny nejspis dostanu i nejakou WAF bot control). ![](https://secure.gravatar.com/avatar/13cd4736e0fab3c6aa6d057f3db4f5cd03d2db9ee2a02dbf0ee5d7efcc3e99db? s=60&d=retro&r=g) ### 󠀁[Causing problems](https://wordpress.org/support/topic/causing-problems-3/)󠁿 [Tomáš Kořínek](https://profiles.wordpress.org/korinektomas/) 3 janvier 2025 When it comes to speeding up the page, it may help, but I’ve found it can also cause two issues: For some reason, it blocks the “admin_notices” hook in the admin area, which can disrupt the proper functioning of other plugins. You need to update your SPF DNS record to comply with DMARC requirements (as explained on the Wedos help page titled “Emails – SPF Record”). Suggestions: The plugin function init_notices() should be removed—why is it even there? 🙂 The plugin should notify users about the potential need to update the SPF record. ![](https://secure.gravatar.com/avatar/90b39fff3803febdcb4743fbb899e2b0f18c35ad43a783c519eccc7f0fefc2cd? s=60&d=retro&r=g) ### 󠀁[Works](https://wordpress.org/support/topic/works-2200/)󠁿 [lexartcz](https://profiles.wordpress.org/lexartcz/) 7 novembre 2024 Simple and Fast. ![](https://secure.gravatar.com/avatar/f7f692334e420691c29af60d98d10620f1ab50d9f56622de72d054b3acf0ec05? s=60&d=retro&r=g) ### 󠀁[Quite impressive!](https://wordpress.org/support/topic/quite-impressive-10/)󠁿 [standasykora](https://profiles.wordpress.org/standasykora/) 23 septembre 2024 Wow! The activation was really two clicks for the free local cache. The performance has grown from 73 to 99-100 (according to PageSpeed Insights). [ Lire les 4 avis ](https://wordpress.org/support/plugin/wgpwpp/reviews/) ## Contributeurs & développeurs « WEDOS | Protection & Cache Performance » est un logiciel libre. Les personnes suivantes ont contribué à cette extension. Contributeurs * [ wedos.com ](https://profiles.wordpress.org/wedos/) “WEDOS | Protection & Cache Performance” a été traduit dans 4 locales. Remerciez [l’équipe de traduction](https://translate.wordpress.org/projects/wp-plugins/wgpwpp/contributors) pour ses contributions. [Traduisez « WEDOS | Protection & Cache Performance » dans votre langue.](https://translate.wordpress.org/projects/wp-plugins/wgpwpp) ### Le développement vous intéresse ? [Parcourir le code](https://plugins.trac.wordpress.org/browser/wgpwpp/), consulter le [SVN dépôt](https://plugins.svn.wordpress.org/wgpwpp/), ou s’inscrire au [journal de développement](https://plugins.trac.wordpress.org/log/wgpwpp/) par [RSS](https://plugins.trac.wordpress.org/log/wgpwpp/?limit=100&mode=stop_on_copy&format=rss). ## Historique des changements #### v2.3.1 * Fixed: version 2.3.0 on WordPress.org was briefly published without the Recommendations files, which stopped websites that updated during that time * New: safety net: if any plugin file is missing (for example after an interrupted update), the plugin pauses itself and shows a notice instead of stopping the website #### v2.3.0 * New: Recommendations — WEDOS publishes signed recommendations, the plugin measures on your site whether they apply and you decide: Confirm or Ignore. Nothing changes without your confirmation and every change can be undone * New: first recommendation — requests for missing media files in wp-content/uploads( typically bots) get a fast 404 instead of starting the whole WordPress; applied at web server level (.htaccess) when the server supports it and a check proves it works, otherwise in PHP before the theme loads * New: server-level rules are removed again automatically when the plugin is deactivated or WEDOS withdraws the recommendation * Security: every request to the WEDOS backend now carries a per-install private key; the verification file publishes only its SHA-256 hash, so nobody else can request this site’s data by naming the domain. The key is created automatically on update and rotates with the verification token * Fixed: a failed verification token rotation no longer retries on every dashboard visit; the plugin re-syncs the backend once and retries after 24 hours #### v2.2.3 * Fixed: flushing the whole page cache from the admin bar no longer ends in a fatal error when another request removes a cache folder at the same time; the flush skips the missing folder and clears the rest * Fixed: cache maintenance and cache size calculation tolerate files and folders removed concurrently #### v2.2.2 * New: Protection Summary — the dashboard explains in plain words what the protection handled (passed, blocked, verified, logged) and why requests were stopped * New: visitor geography with per-country protection actions, connection overview( TLS, HTTP versions) and targeted-paths insight * New: security vulnerability scanning of installed plugins, themes and WordPress core against the WEDOS vulnerability feed, with protection-aware guidance * New: Site Snapshot daily health card (load time, TTFB, SSL, database, updates, admin accounts) with automatic anomaly notices * Improved: onboarding reliably detects an already protected website and opens the dashboard automatically * Improved: origin server IP detection never reports the protection edge address as the origin * Fixed: page cache no longer stores error responses (database errors, fatal errors); deployed cache runners update themselves * Fixed: the verification file is served by WordPress itself when file permissions prevent writing it * Security: hardened output escaping and input sanitization across the admin interface #### v2.2.1 * Improved: smart onboarding — the DNS setup step is skipped automatically when the domain already routes to WEDOS Protection (via A records or CNAME/ANAME), including domains protected under another account * Improved: DNS records are only required when the protection service reports a known actionable state; active domains are never asked for additional records * Improved: WordPress 7.0 compatibility and WordPress.org Plugin Check compliance * Fixed: minor onboarding and dashboard polish #### v2.2.0 * New: Visitor Geography section — interactive world map, top countries, top cities, top targeted URI paths with attack-pattern detection, threat distribution and connection quality breakdown (TLS version, encryption ratio, HTTP methods split) * New: Subscription plans — Free, Standard and Premium with 30-day free trial that can be started directly from the dashboard * New: Security email reports with selectable frequency (weekly or bi-weekly), delivered to the admin email on the configured day * New: Daily rotation of the .well-known verification token for hardened ownership proof * New: WGP CDN cache purge button — manually flush the Anycast CDN edge cache for sites with a provisioned WGP service * Improved: dashboard performance — backend responses are cached locally with smart invalidation on plan changes * Improved: refined entitlement system aligned with the subscription plans * Improved: clearer empty states and actionable first-check prompts across the dashboard * Fixed: numerous stability and UX improvements across onboarding, dashboard and trial activation #### v2.1.1 * Improved: dedicated CDN-only dashboard for sites that do not need full WEDOS Protection #### v2.1.0 * New: WEDOS CDN — speeds up your site by serving WordPress core assets from WEDOS CDN edge nodes; no configuration needed, toggle On in the dashboard * New: WooCommerce CDN (Experimental) — extends CDN to WooCommerce static assets; more plugins coming soon * New: Weekly security reports — receive a weekly email summary of blocked attacks, traffic and protection status * New: Report a problem — submit feedback, bug reports or questions directly from the dashboard * Compatibility: minimum required WordPress version lowered from 6.9 to 6.7 #### v2.0.21 * Fixed: www. prefix stripped from domain before dashboard-data API call * Traffic Analytics: empty state message when no data available #### v2.0.20 * Dashboard stat tiles: Total requests, Yesterday traffic and HTTP Status Codes * Traffic Analytics: Top Countries section with live data * Visitor Geography card hidden when analytics data unavailable * Security: improved API communication layer #### v2.0.19 * Code quality and compatibility improvements #### v2.0.18 * Security: improved communication layer #### v2.0.17 * Plugin renamed to WEDOS | Protection & Cache Performance * Fixed: domain with code 2278 now shows DNS setup step instead of fatal error when DNS not yet pointing to WEDOS #### v2.0.16 * Smarter page cache: per-page caching, deduplication, automatic maintenance and admin bar flush buttons #### v2.0.15 * Verification file: auto-fix permissions on .well-known/ and wedos-verify.txt before write attempt #### v2.0.14 * Compliance: reduced tags to 5 per WordPress.org guidelines * Compliance: added External Services section to README documenting data sent to plugin.wedos.global * Compliance: WordPress core update notices are no longer suppressed on plugin page #### v2.0.13 * Dashboard now shows ‘Active — FREE Plugin’ or ‘Active — WEDOS’ badge based on activation source #### v2.0.12 * Extended suppression of third-party notices — covers all admin_notices variants, core update nags and footer overlays #### v2.0.11 * Suppress third-party admin notices on the plugin dashboard page #### v2.0.10 * Fixed fatal error on activation when OPcache serves stale Settings.php from older version #### v2.0.9 * Renamed mu-plugin file to wgpwpp-cache.php (wp-content/mu-plugins/wgpwpp-cache. php) #### v2.0.8 * Page cache now uses mu-plugin as primary strategy — works independently of other caching plugins * Falls back to advanced-cache.php drop-in if mu-plugins/ is not writable * Dashboard shows which strategy is active (mu-plugin or advanced-cache.php) #### v2.0.7 * Fixed: www. prefix is now stripped from domain before API calls (API does not accept explicit www.) * DNS records are still generated for the original host including www. #### v2.0.6 * Page cache now checks and attempts to auto-fix file permissions before enabling * Permission issues shown with confirmation dialog and detailed error info #### v2.0.5 * Removed wgp-domain-create-retry flow — domain activation is now handled in a single step #### v2.0.4 * Improved domain activation detection for code 2278 — checks A records against known WGP IPs (185.8.237.5, 185.8.237.6), ANAME and www. variant * CDN Cache purge button disabled until release (01.05.2026) #### v2.0.3 * Fixed plugin reset — now fully cleans up all options, cache files, advanced-cache. php and .well-known/ verification files #### v2.0.2 * Added WEDOS CDN Cache card in dashboard with Purge CDN Cache button #### v2.0.1 * Fixed verification file not being created before ingest call (verify_file_missing) * Fixed verification file not served correctly behind WordPress rewrite rules * Fixed unnecessary retry being triggered for all domains (not only disabled) * Fixed error code 1001 (request pending) incorrectly treated as fatal error * Added file permission diagnostics when verification file write fails * Added clear error message in UI when verification file cannot be created * Added .htaccess and do_parse_request hook to ensure /.well-known/ is served directly #### v2.0.0 * Redesigned onboarding and dashboard UI * Simplified DNS setup flow * Improved protection status detection * Performance improvements #### v1.2.2 * Buttons for deletion of file cache and CDN cache * Dashboard improvements * Service activation improvements #### v1.2.1 * Updated FAQ * Updated plugin description and assets #### v1.2.0 * Dashboard page added * UX optimization #### v1.1.6 * UX optimization #### v1.1.5 * Expansion of supported translations (SK, HU) #### v1.1.4 * WP 6.5 compatibility * Language texts corrections #### v1.1.3 * Page caching improvements * REST API improvements #### v1.1.2 * Page caching improvements * Security reports improvements #### v1.1.1 * bugfix: missing icons #### v1.1.0 * Security reports * Page caching * CDN Cache #### v1.0.0 * Initial release ## Méta * Version **2.3.1** * Last updated **il y a 3 jours** * Active installations **300+** * WordPress version ** 6.7 ou plus ** * Tested up to **7.1.3** * PHP version ** 8.2 ou plus ** * Languages * [Czech](https://cs.wordpress.org/plugins/wgpwpp/), [English (US)](https://wordpress.org/plugins/wgpwpp/), [German](https://de.wordpress.org/plugins/wgpwpp/), [Hungarian](https://hu.wordpress.org/plugins/wgpwpp/), et [Slovak](https://sk.wordpress.org/plugins/wgpwpp/). * [Traduire dans votre langue](https://translate.wordpress.org/projects/wp-plugins/wgpwpp) * Tags * [cache](https://fr-ca.wordpress.org/plugins/tags/cache/)[cdn](https://fr-ca.wordpress.org/plugins/tags/cdn/) [firewall](https://fr-ca.wordpress.org/plugins/tags/firewall/)[security](https://fr-ca.wordpress.org/plugins/tags/security/) [WAF](https://fr-ca.wordpress.org/plugins/tags/waf/) * [Vue avancée](https://fr-ca.wordpress.org/plugins/wgpwpp/advanced/) ## Notes 3.8 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/wgpwpp/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/wgpwpp/reviews/?filter=4) * [ 1 3-star review ](https://wordpress.org/support/plugin/wgpwpp/reviews/?filter=3) * [ 1 2-star review ](https://wordpress.org/support/plugin/wgpwpp/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/wgpwpp/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/wgpwpp/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wgpwpp/reviews/) ## Contributeurs * [ wedos.com ](https://profiles.wordpress.org/wedos/) ## Support Quelque chose à dire ? Besoin d’aide ? [Voir le forum de support](https://wordpress.org/support/plugin/wgpwpp/)