Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
Media file replacement connector for Stream (Enable Media Replace + WP Media Folder)
Lightweight login rate limiter using transients. Drop in wp-content/mu-plugins/.
WordPress Plugin: Send an email to the user when someone successfully logs into their account.
Prevents a common cache poisoning scenario on enterprise websites
A Google-powered security suite for WordPress: reCAPTCHA v3 scoring on the WordPress and WooCommerce login, registration, lost password, and checkout forms, plus two-factor authentication (TOTP) compatible with Google Authenticator. Works with or…
A WordPress plugin that blocks 404 scanners at the Cloudflare edge using IP Access Rules. Works on every Cloudflare plan including Free; authenticates with a scoped API token kept in wp-config.php.
Adds security headers (HSTS, CSP, Referrer-Policy, X-Frame-Options) and hardens target=_blank links.
Wordpress Plugin
Block user registration site-wide — WordPress core, WooCommerce, BuddyPress, REST API and more.
Comprehensive WordPress site health scanner, conflict resolver, and auto-repair engine. 11 scanners, 15 auto-repair actions, weighted health scoring, email reports.
Lightweight WordPress security plugin that blocks self-healing drop-in/MU-plugin malware, rogue admin creation, theme functions.php injection, and XML-RPC attacks.
Simple tools Protect uploaded PDF files in WordPress so only logged-in users can access them.
Enpii REST API - This WordPress plugin provides a secure and efficient way to handle REST API authentication and user access control
WordPress plugin that serves an RFC 9116 security.txt maintained under Settings, with an expiry that follows the last save.
Disable all WordPress core REST endpoints: posts, pages, and attachments
Scans your WordPress site and server for security weaknesses (core, users, files, integrity, plugins/themes, theme code vulnerabilities, PHP, database, HTTPS/headers, known vulnerabilities) and generates a downloadable report
WordPress security & hardening plugin scaffold for BCM Network (login protection, REST/XML-RPC hardening, integrity scan, alerts).
** In development ** Advanced passive CAPTCHA for any WordPress form. Blocks bots via timing, JS execution, fingerprinting, nonce/session/IP checks, rate limits & IP lists. Manual integration needed: add hidden field &…
A WooCommerce plugin that detects and blocks card-testing botnet attacks using honeypot products and intelligent threat scoring.