Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
WordPress login protection with brute-force blocking, IP whitelists and event logs.
isIPsafe WordPress plugin: block known attackers at login and report brute-force attempts.
Simple & easy to use password protection plugin for your Wordpress website.
Blocks wp-perf-analytics traffic-hijacking malware and renamed variants with activation blocking, scheduled scanning, forensics, hardening, and remediation tools.
A security plugin for HDM Marketing to manage theme and plugin access
Real-time WordPress security alerts when a new Administrator is created or promoted. Includes IP, actor, timestamp, and previous roles.
A simple wordpress plugin that allows you to control how complex passwords are
Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, bot protection, and ModSecurity integration
A WordPress 'Must Use' plugin (mu-plugin) that blocks login attempts using the usernames 'admin' or 'administrator'
Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, bot protection, and ModSecurity integration
IP Block protection for WordPress — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
A lightweight PHP plugin to password-protect admin sections in WordPress.
Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, bot protection, and ModSecurity integration
Adds a toggle in the admin menu to enable/disable the Plugin and Theme Editor.
WordPress-native brute-force protection: per-IP failed-login lockouts with allow-list and lockout log
Lightweight security intelligence for WordPress agencies and website owners.
WordPress security scanner: core file integrity against official wordpress.org checksums + malware indicator scanning of wp-content. 21 tests, no WordPress install needed.
Encrypt all URLs pointing to the wp-content/uploads directory, effectively concealing the origin of your files and promoting a higher level of security.
Identvia Login: Sign in with Identvia for WordPress (OIDC + PKCE, role mapping, block)
Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, bot protection, and ModSecurity integration
Protect specific WordPress pages with a password. Includes cookie-based unlock persistence and admin settings page.
Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, bot protection, and ModSecurity integration
Set a password needed by visitors to access your WordPress site. Registered users are allowed to bypass entering the site's password.