Hide My WP Ghost
Antivirus scan
Powered by ClamAV
✅ Verified clean
This product file has passed our security filters.
Want to run a fresh ClamAV scan right now? Takes a few seconds and shows scanner version, signature DB and live result.
This can take 5 to 30 seconds.
Clean file Threat detected
No threats detected in this file.
- File
- Size
- Scanned
- ClamAV
- Signature database
⚡ Powered by ClamAV
Scan could not be completed
Report product
If you detected an issue (broken file, malware, inappropriate content, etc.) let us know and we'll review it ASAP.
Sign in to report
About Hide My WP Ghost
Bots don't read your site: they scan it
Most attacks on a WordPress site are not launched by a person who picked you, but by a bot crawling thousands of sites looking for known paths: wp-login.php, wp-admin, plugin folders with published vulnerabilities. If your site answers like every other one, it makes the list. Hide My WP Ghost works on that idea: your installation should stop looking like what the bot is searching for.
Hide My WP Ghost changes the paths and the WordPress footprint
The core of the plugin is changing and hiding the usual WordPress, plugin and theme paths so vulnerability scanners don't find what they expect. These are the features that matter most in practice:
- Admin access: a custom login URL and blocking of unauthorized access to wp-admin.
- URL and text mapping: if, after changing the paths, the source code still shows a URL that gives a plugin away, you can replace it with another one.
- Brute force: limits repeated login attempts with lockouts.
- XML-RPC: you can disable it and block access to xmlrpc.php, a common route for guessing passwords.
- Injections and XSS: adds filters against script and SQL injection, and security headers against Cross-Site Scripting.
- 7G and 8G firewall: firewall rules designed to block threats without hurting performance.
- Two-factor authentication: 2FA to make access harder even if someone has the password.
- Temporary access: time-limited admin accounts for collaborators or technical services.
Hiding is not the same as fixing
Hiding paths reduces noise and automated attacks, but it does not repair an outdated plugin or one with a known vulnerability. Nor does it replace backups or a decent password. Think of this plugin as one more layer, not the only one. Also, changing paths can cause conflicts with themes or plugins that expect the standard locations, so it's worth testing the whole site after activating it.
Audit and log: know what happens on your site
The plugin runs more than 35 security checks and returns a list of detected problems with guidance on how to fix them. It is useful as a starting point before touching settings. The activity log records important actions on your site, so if something changes you can review what happened and when.
Frequently asked questions about Hide My WP Ghost
Does it work alongside Wordfence, Sucuri or other security plugins?
It is designed as a complement to plugins such as Wordfence, WP Cerber, Sucuri or Solid WP, not as a direct replacement for all of them.
Does it work with Multisite?
Yes, it supports multisite installations in both subdirectories and subdomains.
Do I need to be technical to set it up?
Setup is simple compared with other security plugins, but changing paths requires care: write down the new login URL before logging out so you don't lock yourself out.
Is it compatible with my hosting?
It is compatible with common hosts such as GoDaddy, SiteGround, WP Engine, Bluehost, Hostinger or DigitalOcean, among others.
Write down the new login URL before touching anything
The most practical way to start is to run the security check first to see the real state of the site. Then change the paths in stages, keep the custom login URL somewhere safe, and review the entire site (forms, shop, pages with heavy plugins) to catch paths that have stopped loading. If you use caching or a CDN, clear it after every change.
Topics
Version history
-
v
8.3.05 Current 10 Mar 2026
Customer reviews
Sign in to leave a review. Only people who have the product can review it.
No reviews for this product yet.
Frequently asked questions
-
GPL (General Public License) is the license under which WordPress and most premium plugins/themes are distributed. It grants you the right to use, modify and redistribute the software in as many projects as you want, with no domain restrictions.
-
Yes. With membership you get automatic updates via our GPLClub Updater plugin (installed on your WP, detects new versions and applies them). With individual purchase, you get one year of manual updates from your account.
-
Depends on the plan. Monthly: 3 domains. Semi-annual: 7. Annual and Lifetime: 15. Individual purchase: 1 domain.
-
GPLClub offers its own support for installation, configuration and compatibility. For direct support from the original author (feature requests, product-specific bugs), a license purchased from the author is required.
Related products
WooCommerce Australia Post Shipping Method
By WooCommerce
Quiz Customizer for Learndash
By LearnDash LMS
OpenPos Variation Swatches for WooCommerce Pro
Total Recipe Generator - WordPress Recipe Maker with Schema and Nutrition Facts (Elementor addon)
By Elementor