Security
Hardening, firewalls, login protection, scanning, 2FA.
263 plugins with two or more releases. Show all 1,148
Comment Validator plugin for ClassicPress
Adds logic which parses a honeypot field, called `come_and_get_it` before submission of Brevo's WordPress plugin submission forms.
Rename the WordPress login URL to a custom slug for enhanced security. Includes brute force protection and IP whitelist management.
Your friendly WordPress security inspector. Keeps a history of every report, so you can see what is new, what is fixed, and what is next.
The Hack Repair Guy’s Group Password Reset plugin is a native WordPress admin tool that lets administrators bulk reset passwords by scope, skip excluded usernames, and send secure password reset links to…
Security Tools is a comprehensive Must-Use (MU) WordPress plugin designed to provide advanced security management, administrative control, and interface customization capabilities. The plugin operates invisibly, hidden from other administrators while maintaining full…
Risk-reduction WordPress plugin for the PHP2Shell exploit (CVE-2026-109618 / CVE-2026-109619) on sites that cannot update PHP yet. A shield, not a cure.
Admin toolkit: DB migrate/export, DB cleanup, and security modules (hide login, captcha, antispam contact, rate limit, login log, hardening).
Site hardening, admin and media tools, cache refresh, and profile enhancements.
Password protects all pages and posts except the front page
Free WordPress plugin that checks a site for PHP2Shell and wp2shell exposure and signs of compromise. By Jeremy Anderson Tech.
Lightweight malware scanner for WordPress — files, database and vulnerable software. Reports only, never modifies your site.
Display various indicators to let admins know whether the DB connection is encrypted
Taming your WordPress user sessions, to help reduce the chance of session hijacking
Resolves critical security vulnerabilities: WordPress login protection, HTTPOnly cookie implementation, and comprehensive GraphQL security. Addresses security audit findings automatically.
Lightweight email-based two-factor authentication for WordPress admin access.
This plugin allows management of a site's Content Security Policy
WordPress plugin that detects bot swarms as swarms: request classes, swarm metrics, storm score, learned baseline, storm states and alerts. Radar-only in 0.1.
Advanced view of activity log and writing activity to file or Elasticsearch for use in security auditing. Especially useful if monitoring multiple instances.
Create a temporary WordPress admin user to provide access on support issues, etc.
Wordfence security abilities for MCP. Monitor security status, manage blocked IPs, view scan issues, and control lockouts.
WordPress plugin for 2 factor authentication (TOTP and SMS)
Encrypted, password-controlled WordPress file delivery with expiry and revocation; tested on Apache and nginx. https://kieransimkin.co.uk/
Lightweight yet powerful WordPress security framework focused on zero-trust architecture, cryptographic API authentication, distributed threat sharing, infrastructure hardening, rate limiting, CIDR protection, replay attack defense, and high-performance security without unnecessary overhead.