Curious if the WordPress security plugin you are using is actually providing effective protection? This tool will check the effectiveness with a set of simulated malicious payloads that check if protection is effective without actually being able to exploit a website.

Website to test for firewall effectiveness: