Security
Hardening, firewalls, login protection, scanning, 2FA.
1,148 repositories, including 885 with fewer than two releases. Show released plugins only
Comment Validator plugin for ClassicPress
Adds logic which parses a honeypot field, called `come_and_get_it` before submission of Brevo's WordPress plugin submission forms.
Rename the WordPress login URL to a custom slug for enhanced security. Includes brute force protection and IP whitelist management.
Your friendly WordPress security inspector. Keeps a history of every report, so you can see what is new, what is fixed, and what is next.
The Hack Repair Guy’s Group Password Reset plugin is a native WordPress admin tool that lets administrators bulk reset passwords by scope, skip excluded usernames, and send secure password reset links to…
Security Tools is a comprehensive Must-Use (MU) WordPress plugin designed to provide advanced security management, administrative control, and interface customization capabilities. The plugin operates invisibly, hidden from other administrators while maintaining full…
Risk-reduction WordPress plugin for the PHP2Shell exploit (CVE-2026-109618 / CVE-2026-109619) on sites that cannot update PHP yet. A shield, not a cure.
Admin toolkit: DB migrate/export, DB cleanup, and security modules (hide login, captcha, antispam contact, rate limit, login log, hardening).
Site hardening, admin and media tools, cache refresh, and profile enhancements.
Password protects all pages and posts except the front page
Free WordPress plugin that checks a site for PHP2Shell and wp2shell exposure and signs of compromise. By Jeremy Anderson Tech.
Lightweight malware scanner for WordPress — files, database and vulnerable software. Reports only, never modifies your site.
Display various indicators to let admins know whether the DB connection is encrypted
Taming your WordPress user sessions, to help reduce the chance of session hijacking
Resolves critical security vulnerabilities: WordPress login protection, HTTPOnly cookie implementation, and comprehensive GraphQL security. Addresses security audit findings automatically.
Lightweight email-based two-factor authentication for WordPress admin access.
This plugin allows management of a site's Content Security Policy
Makes Bricks Builder login forms work with your two-factor authentication plugin.
WordPress plugin that detects bot swarms as swarms: request classes, swarm metrics, storm score, learned baseline, storm states and alerts. Radar-only in 0.1.
Hide default WordPress login routes behind a private URL and reduce public access to login entry points.
Advanced view of activity log and writing activity to file or Elasticsearch for use in security auditing. Especially useful if monitoring multiple instances.