Security 152

Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.

WordPress Simple SAML plugin

WP Anti-Spam

Self-hosted behavioral captcha for WordPress — fine-grained interaction analysis, no external service, no tracking.

Browser security utilities for WordPress/Altis

WordPress plugin to provide support for the Yubico OTP authentication

Lightweight firewall — rate-limits endpoints, blocks bots, bans repeat offenders, and adds security headers.

Helps keeping WordPress websites secure.

Resolves critical security vulnerabilities: WordPress login protection, HTTPOnly cookie implementation, and comprehensive GraphQL security. Addresses security audit findings automatically.

Delegate OAuth 2 authorization to another WordPress site

Manage access to the WP REST API with rate limits and IP-based rules.

redirect if not logged in

Artifact repo for the OpenID Connect plugin

A simple password protection plugin for WordPress—no usernames, no accounts, just one shared password. Share the password with those who need access and they're in. Perfect for situations where you need quick,…

Taming your WordPress user sessions, to help reduce the chance of session hijacking

WordPress plugin for 2 factor authentication (TOTP and SMS)

Cloudflare Access SSO (Single Sign On) for WordPress

Disallows bad WordPress plugins

Hide default WordPress login routes behind a private URL and reduce public access to login entry points.

Block junk search traffic, harden public endpoints, and manage crawl-facing protection rules from one admin page.

Generate and rotate secure one-click administrator login URLs from inside WordPress.

Track high-privilege WordPress and WooCommerce admin activity with filters, guard controls, and audit logging.

Require members to use “Strong” passwords based on required characters.

Enable WordPress features: SVG uploads and more

WordPress plugin to limit the Access-Control-Allow-Origin header to only allowed origins.

Disable WordPress XML-RPC via actions and filters.

WordPress plugin to lock a WordPress user to specified IP addresses

Adds audit functionality for S3 Uploads actions, e.g., ACL changes. Add-on for the S3 Uploads plugin.

Rename the WordPress login URL to a custom slug for enhanced security. Includes brute force protection and IP whitelist management.

Enables ARGON2ID for password hashes.