shouldiuse.io

Categories

VERDICT

Wordfence Review

Worth it

Should I use Wordfence?

Firewall, malware scan, and login protection for WordPress - wordfence.com

· 1 month ago

If your site runs WordPress, start with Wordfence Free — it's the category default with a real firewall and scanner. Skip Premium unless you need real-time rule updates; repeated price hikes weaken the case.

Confidence

High. Based on ~40 public sources: reviews, Reddit threads, official pages, and security databases. Snippets were truncated, so some details are partial.

Ratings

  • Value for money
  • Ease of useNot assessed in reviewed sources
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
PremiumPaid per site (exact price not shown in reviewed sources)
Care / ResponseNot shown in reviewed sources

Best for

  • WordPress sites of any size
  • Budget bloggers (free tier)
  • Agencies managing many WP sites
  • Owners wanting app-level WAF

Not for

  • Non-WordPress websites
  • Enterprises needing server-level WAF
  • Fully hands-off owners who never touch settings
  • Anyone wanting human support without paying

Gotchas - check before you buy

high

Premium pricing has climbed repeatedly — 20.2% hike in 2022, increases again December 2024.

medium

Free tier's firewall rules lag Premium's; Reddit openly debates whether the upgrade is worth it.

medium

Third-party reviews call Premium pricing steep — compare MalCare or Sucuri before paying.

medium

Some server setups (OpenLiteSpeed) need extra configuration to run Wordfence properly.

Pros and cons

Pros

  • Free tier includes firewall, malware scanner, and login protection
  • Over 5 million installs; most popular WordPress security plugin
  • Firewall blocked 1M+ attacks on one Elementor Pro flaw
  • Maintains its own vulnerability database and bug bounty program
  • Rated 4.8/5 on Trustpilot across 406 reviews

Cons

  • Free plan gets firewall rules later than Premium
  • Premium price hikes: 20.2% in 2022, more in 2024
  • Users debate whether Wordfence slows down WordPress sites
  • Full support reserved for paying customers
  • Setup friction reported on OpenLiteSpeed servers

Sources & method

- 15 sources - No breaches of Wordfence found; vendor runs active vulnerability research, though CVE databases list some XSS issues under the Wordfence vendor name.

official x4review x8security x3
  • XSS vulnerabilities listed under Wordfence vendor, CVE aggregator lists cross-site scripting issues attributed to Wordfence; severity and remediation details truncated in the reviewed source.

Key stats

  • Value for money: 3/5

    Rating

  • $0

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 3/5. Strong free tier; Premium value debated, prices rising
  • Ease of use. Not assessed in reviewed sources
  • Feature depth: 5/5. Firewall, scanner, vulnerability DB, CLI, Central
  • Support quality: 3/5. Real support gated to paid plans
  • Security posture: 5/5. Bug bounty, own vuln DB, 1M+ exploits blocked
  • 4.8/5 Trustpilot 406 reviews
  • $0 Starting price Free tier with firewall and scanner
  • 5M+ Installs Claimed on Wordfence pricing page
  • 20.2% Premium hikes 2022 increase; more announced for Dec 2024

Pricing

Free

$0

  • Endpoint firewall and malware scanner
  • Login protection
  • Forum-based support

Premium

Paid per site (exact price not shown in reviewed sources)

  • Real-time firewall rules
  • Premium support

Care / Response

Not shown in reviewed sources

  • Hands-on help for business owners

Security

No breaches of Wordfence found; vendor runs active vulnerability research, though CVE databases list some XSS issues under the Wordfence vendor name.

  • XSS vulnerabilities listed under Wordfence vendorCVE aggregator lists cross-site scripting issues attributed to Wordfence; severity and remediation details truncated in the reviewed source.13

What users say

Reviews and Reddit broadly praise the free tier's protection, while debating Premium's value, site speed impact, and paid-only support.

“Plugin was worth leaving my 1st WP review.”
WordPress.org support forum
“We have been customers of WordFence”
Trustpilot reviewer
“Wordfence Free is usually enough”
Reddit, r/Wordpress

Alternatives

Compare Wordfence with each alternative.

  • Cloudflare (free WAF)

    Pairs well with free Wordfence for layered protection.

Full analysis

Based on ~40 public sources: reviews, Reddit threads, official pages, and security databases. Snippets were truncated, so some details are partial.

Best free security plugin for WordPress sites; only pay for Premium if you need real-time rules.

Methodology

Based on ~40 public sources: reviews, Reddit threads, official pages, and security databases. Snippets were truncated, so some details are partial.

Read how a report is made.

Sources

  1. Wordfence: WordPress Security Pluginwordfence.com
    official
  2. Wordfence Security – Firewall, Malware Scan, and Login Protectionwordpress.org
    official
  3. Wordfence Pricingwordfence.com
    official
  4. Wordfence Price Increases Coming December 5th, 2024wordfence.com
    official
  5. Wordfence Reviews — Trustpilottrustpilot.com
    review
  6. Wordfence Reviews — G2g2.com
    review
  7. Wordfence Reviews — Capterracapterra.com
    review
  8. Wordfence Free or Paid Plan? — Reddit r/Wordpressreddit.com
    review
  9. Wordfence Premium, worth it? — Reddit r/Wordpressreddit.com
    review
  10. Wordfence Free vs Premium — MalCaremalcare.com
    review
  11. Sucuri vs Wordfence — Kinstakinsta.com
    review
  12. Attackers Actively Exploiting Elementor Pro Vulnerabilitywordfence.com
    security
  13. Wordfence CVEs and Security Vulnerabilities — OpenCVEapp.opencve.io
    security
  14. WordPress Vulnerability Database — Wordfence Intelligencewordfence.com
    security
  15. Need some help with WordFence on OpenLiteSpeedcommunity.enhance.com
    review

Add this review to your site

Wordfence earned a Worth it check.

Put the badge on your site, pricing page, or docs.

Visitors see an independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Worth it Wordfence Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.