Revenue Shield
Ad blockers affect publisher revenues. Revenue Shield is an advanced solution designed for publishers to recover lost ad revenue by asking users to whitelist your site, while also providing powerful security hardening…
Use with caution
Revenue Shield works, but test it on a staging site before relying on it in 2026. Was last updated 4 months ago, and scores 42/100 on our health check.
- Small user base (<10 active installs)
- Very few reviews so far
- Only tested up to WordPress 6.9 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Revenue Shield stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| ad blocker | >100 |
| firewall | >100 |
| monetize | >100 |
| security | >100 |
| WAF | >100 |
About Revenue Shield
From the official readme · v1.1.8Description
Ad blockers affect publisher revenues. Revenue Shield is an advanced solution designed for publishers to recover lost ad revenue by asking users to whitelist your site, while also providing powerful security hardening and WAF features.
🛑 REVENUE SHIELD ENGINE
Free (Lite) Features:
* Smart Detection: Detects basic adblockers via DOM element checks.
* Customizable Warning: Change the warning title and message to fit your brand.
* Dismissible Popups: Allow users to close the warning and continue reading by simply clicking “Skip” or pressing the ESC key.
PRO Features:
* Hard-Lock Engine: Removes the “Skip” button and disables the ESC key.
* Polymorphic Anti-Tamper: Randomizes HTML/CSS/JS variables per reload to defeat AdBlock static rules and Inspect Element bypassing.
* Content Blurring: Adds a premium frosted-glass blur over your entire website content.
* AdBlock Redirect: Instantly redirect adblock users to a specific URL instead of a popup.
* rDNS SEO Bot Verification: Uses cached Reverse DNS lookup to securely verify real Google/Bing bots.
🔒 SYSTEM HARDENING & SECURITY
Free (Lite) Features:
* Customizable Brute Force Protection: Limit malicious login attempts based on IP with adjustable max retries and lockout durations.
* Hide WP Version: Removes your WordPress version from the source code.
* Disable File Editor: Prevents editing theme/plugin files directly from the dashboard.
* Custom DB Logging: Threat logs and statistics are stored in custom, highly optimized database tables to prevent wp_options bloat and ensure maximum server performance.
PRO Features:
* Enterprise WAF Engine: Scans GET, POST, COOKIE, and User-Agent parameters. Automatically decodes Base64/URL payloads to detect hidden XSS, SQLi, and LFI attacks.
* Malicious File Upload Protection: Scans the $_FILES array to block dangerous extensions (.php, .phtml, .svg, .exe) uploaded via forms or comments.
* Geo-Blocking: Block specific countries from accessing your WordPress login portal using ISO country codes.
* Manual IP Blacklist: Instantly block specific malicious IP addresses at the server level.
* Hide Login Page: Change your wp-login.php path to a secret custom URL (e.g., /my-secret-door).
* DDoS Rate Limiting: Blocks IPs making excessive requests (e.g., >120 requests per minute).
* Block Empty User-Agents: Blocks primitive scrapers and bad bots that send no browser identity.
* Disable XML-RPC: Blocks the WordPress XML-RPC endpoints to prevent pingback attacks.
* CSV Export: Easily export your Threat Logs to a CSV file for enterprise reporting.
Installation
- Upload the
revenue-shieldfolder to the/wp-content/plugins/directory. - Activate the plugin through the ‘Plugins’ menu in WordPress.
- Navigate to the
Revenue Shieldmenu in your WordPress admin dashboard. - Customize your warning message and toggle on your desired Security levels.
Frequently asked questions
How does the Brute Force protection block attackers?
The plugin uses the standard WordPress Transients API to log failed attempts. You can customize the maximum number of retries and the lockout duration directly from the settings panel. Blocked IPs and targeted usernames are also recorded in your Threat Logs.
Is the plugin heavy on my server?
No. The rules are written in native PHP and heavily utilize caching/transients. As of version 1.1.8, all logs and stats are routed to custom database tables, ensuring zero database bottlenecks even under heavy DDoS or Brute Force attacks.
Changelog
1.1.8
- Feature: Added Custom Database Tables (
wp_revshield_logsandwp_revshield_stats) to preventwp_optionsbloat and ensure enterprise-level performance during heavy bot attacks. - Feature: Added Malicious File Upload Protection (PRO) to block dangerous extensions (.php, .exe, .svg) in
$_FILES. - Feature: Added Manual IP Blacklist (PRO) to instantly block specific IPs.
- Feature: Added Geo-Blocking (PRO) to restrict login page access by country code.
- Feature: Added CSV Export and Pagination for Threat Logs.
- Enhancement: Advanced WAF Engine now decodes and inspects Base64 and URL-encoded payloads for hidden SQLi/XSS attacks.
1.1.7
- Feature: Limit Login Attempts is now fully customizable. You can set Max Retries and Lockout Time directly from the UI.
- Feature: Brute Force lockouts are now automatically recorded and displayed in the Threat Logs tab.
- Enhancement: Upgraded the Enterprise WAF Engine with broader, OWASP-level regex rules covering more SQLi, XSS, LFI, and Bad Bot patterns.
- Fix: Resolved a rolling-window logic bug in the DDoS Rate Limiting engine where the block timer would reset incorrectly on continuous requests.
1.1.6
- Fix: Resolved a JavaScript DOM race condition that prevented the AdBlock warning from displaying on certain browsers (e.g., Opera).
- Fix: Improved mobile responsiveness and fixed screen overflow issues for the warning modal.
1.1.5
- Feature: Added Enterprise WAF Engine for PRO users (SQLi & XSS payload detection).
- Feature: Added Polymorphic Anti-Tamper Engine to defeat advanced adblockers.
- Feature: Added True rDNS SEO Bot Verification.
- Feature: Added Content Blurring, Hide Login Page, DDoS Rate Limiting, and Empty UA Blocking.
- Tweak: Optimized codebase and improved Freemius premium integration.
1.1.4
- Fix: Codebase fully refactored to meet strict WordPress.org Plugin Directory guidelines.
- Tweak: Removed short prefixes and implemented strict wp_enqueue standards.
- Tweak: Updated plugin slug for better repository synchronization.
1.1.3
- Initial release of Revenue Shield.
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Revenue Shield alternatives
All ad blocker plugins →FAQ
Revenue Shield: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 12, 2026
Is Revenue Shield free?
Yes. Revenue Shield is free to download and use from the official WordPress.org plugin directory.
Is Revenue Shield safe to use in 2026?
Revenue Shield works, but test it on a staging site before relying on it in 2026. Was last updated 4 months ago, and scores 42/100 on our health check.
How many websites use Revenue Shield?
Revenue Shield is active on <10 WordPress websites and has been downloaded 345 times since it launched in June 2026. It was downloaded 56 times in the last 30 days.
Does Revenue Shield work with WordPress 7.1?
Revenue Shield is officially tested up to WordPress 6.9.10, while the latest release is 7.1.3. It may still work, but try it on a staging site first.
What PHP version does Revenue Shield need?
Revenue Shield requires PHP 7.2 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Revenue Shield last updated?
The latest version, 1.1.8, was released on June 22, 2026 (4 months ago).
Who makes Revenue Shield?
Revenue Shield is developed and maintained by ekeskin2034.
What are the best alternatives to Revenue Shield?
The most popular alternatives to Revenue Shield are Ad Unblock (100+ installs), Detect AdBlock (20+ installs) and Sorry AdBlocker (10+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card