Security
Hardening, firewalls, login protection, scanning, 2FA.
263 plugins with two or more releases. Show all 1,148
Scrub options, deactivate denylisted plugins, and delete user data on development sites.
WordPress Plugin - Auditing, Malware Scanner and Security Hardening
WordPress Simple SAML plugin
VietShield WAF - High-performance Web Application Firewall (WAF) for WordPress. Protects against SQL Injection, XSS, RCE, and more with advanced traffic analysis and real-time blocking.
Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.
Lightweight WordPress firewall — rate-limits endpoints, blocks bots, bans repeat offenders, and adds security headers
Pressable One Click Login WordPress Plugin
WP Force Repair is a specialized recovery tool designed to fix hacked or broken WordPress sites.
Gaitcha captcha integration for WordPress
A WordPress plugin that provides secure, granular access control for media files. Protect your uploads by moving them to a secure location and controlling access through custom control.
Browser security utilities for WordPress/Altis
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
Pressable Basic Authentication WordPress Plugin
ClassicPress plugin: Limit rate of login attempts, including by way of cookies, for each IP.
Check your WordPress site against the WP Registry — a public database of hashed plugins, themes, and files. Hash-based vulnerability and malware detection.
WordPress plugin to enable Yubico OTP authentication
Allow multiple passwords for password protected pages and posts.
Delegate OAuth 2 authorization to another WordPress site
A WordPress plugin that helps keeping WordPress websites secure.
Extends the WordPress Two Factor plugin with advanced role-based controls, forced 2FA methods, and enhanced administrative features for single-site and Multisite installations.
AGPL-3.0 Open-Core security suite for WordPress 6.x / PHP 8.1-8.5: ZEUS pre-boot WAF, AEGIS deep-packet inspection, TRINITY XDR, ThroneGuard privilege lockdown, HADES admin cloaking and PHP upload-progress hardening. Local-first, zero CDN dependencies.
Script that requires users to be logged in view site.
WebAuthn for the Wordpress Two Factor plugin
Part of the foundation series of plugins, this is an internal custom login plugin for Inkfire websites.