Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
Enforceable, frontend-first two-factor authentication for WordPress with role-based hard enforcement.
Gutenberg-ready WordPress plugin for displaying ENISA EUVD vulnerabilities
Wordpress Plugin that checks if your PHP Version is patched against CVE-2026-109618 / CVE-2026-109619
Telia tunnistautuminen (Strong authentication), a WordPress Plugin for restricted accesses like specific page sections, blocks, and forms.
A stunning custom login screen with animated backgrounds and two-factor authentication.
One-click WordPress hardening plugin: security headers, XML-RPC off, enumeration blocked, login limiter. One small readable file.
Restrict access to the WordPress login screen by IP addresses. Only users from the stored IPs can log in, or they can whitelist themselves via a secret key.
Read-only-by-default WordPress incident-response scanner for the “wp2shell” attack chain (CVE-2026-60137 / CVE-2026-63030): detects shadow-admin, database and filesystem IOCs, verifies core integrity, and exports evidence. Optional controlled account cleanup; does not remove malware.
Core admin customizations, security hardening, site settings, shortcodes, and utility features for Cotlas client sites.
Secure WordPress SVG file uploads with server-side sanitization, role-based permissions, and full Media Library compatibility.
A access list plugin to allow access to certain areas of a WordPress instance.
WordPress plugin that provides granular control over file access and visibility on your WordPress site. It allows administrators to protect specific file types and manage access through an intuitive admin interface.
A WordPress plugin to rename all database table prefixes from the admin panel — no manual SQL required.
Hostnasi Wordpress Security Hardening Plugins
WordPress plugin that provides the client side functionality of a Single Sign On (SSO) Network
WatchTower WordPress Client
Just a simple WordPress plugin to force users to be logged in to see the site, and work with ManageWP connections.
WordPress security plugin for detecting suspicious files, auditing vulnerable YOOtheme Pro versions, and safely managing malware quarantine and cleanup.
Hides what identifies a WordPress install and closes its enumeration paths. One settings page of on/off switches.