Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
The W3TC version 0.9.4.1 support page has a XSS vulnerability. This plugin denies access to ALL users to the W3TC support page, gives you time to change plugins.
The most comprehensive anti-spam solution for WordPress. Protect comments, registrations, logins, and 10+ form plugins.
WordPress plugin that simply puts recaptcha on the WordPress registration page.
Check your WordPress site for vulnerabilities against the WPScan vulnerabilities database API.
Tracks WordPress login attempts, active sessions, logout times, browser, OS, IP address, and user agent in a local admin report.
Protect your WordPress for free with 6 essential security HTTP headers, a powerful file integrity monitoring (FIM) core scanner with automatic file restoration, and two-factor authentication (2FA). Advanced security in a clear,…
WordPress plugin. Prevents logged-out users from obtaining a list of user names and email addresses via the REST API.
AegisGuard Security is an open-source WordPress security plugin featuring a Web Application Firewall (WAF), malware scanner, file integrity monitoring, TOTP MFA, brute-force/login protection, WordPress hardening, audit logs, incident detection, encrypted quarantine, WP-CLI…
Deep WordPress security, malware, integrity and forensic scanner. Scans files, core/plugins/themes, database, users, cron, configuration, persistence, obfuscation, suspicious code, URLs and content to identify security threats and compromised sites.
🛡️ All-in-one WordPress security plugin: brute-force protection, malware & file-integrity scanning, VirusTotal integration, firewall, 2FA, and instant email alerts.
Sweet Honey Pot is a lightweight WordPress plugin that transforms any standard website into a powerful Threat Intelligence and Honeypot platform.It turns your normal WordPress site into an intelligent trap that attracts,…
WordPress upload security and content firewall plugin (engineering preview). Privately inspect uploaded files with policy rules, ClamD malware scanning, DLP/QR checks, image and SVG reconstruction, human review, audit logs, privacy controls and…
WordPress SSO Provider is a security-focused IAM and Single Sign-On foundation for WordPress. It includes application management, OAuth 2.0 + PKCE primitives, OpenID Connect discovery, SCIM filtering, CAS tickets, encrypted secrets, audit…
Privacy-first face recognition login for WordPress. No third-party APIs. No biometric data ever leaves your server. All recognition happens locally in the user's browser using TensorFlow.js and `face-api.js`
A WordPress plugin for email-based account confirmation and admin two-factor enforcement. It adds verification for registration and checkout, plus integration with the Two Factor plugin for protected admin roles.
A lightweight WordPress plugin to monitor login attempts and block brute-force attacks.
Exploration: scoping individual WordPress Application Passwords by role, capability group, read-only, Abilities API, and expiry.
Stops bots from discovering usernames through ?author= URLs, the REST API, and oEmbed, while keeping admin author links working.
Removes feed links from the page source and redirects feed requests to the homepage.
Send event data from your WordPress to tirreno for audit log, detect threats and record filed edit history.