Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
A malware scanner your AI assistant can actually drive. This plugin turns WordPress into a Model Context Protocol (MCP) server, so an AI assistant such as Claude can scan the site on…
Use Twilio (and Authy) to validate new registrations using SMS verification.
Custom WordPress plugin for CAMeSM enabling secure, schedule-based voting with ID authentication, audit logging, and full admin control.
Ships Kinsta access logs and per-request user identity to write-only Google Cloud Storage for WordPress incident forensics.
TOTP-based two-factor authentication for WordPress with QR setup, backup codes and role-based enforcement.
The AntiDeface WordPress Plugin is designed to protect your WordPress site from defacement attacks. It monitors your website for unauthorized changes and provides alerts to ensure your content remains secure.
An unofficial connector plugin that extends the official OOPSpam Anti-Spam plugin with login-page protection. WordPress out of the box has zero spam or bot protection on `wp-login.php`, and the official OOPSpam plugin…
Completely disables comments so that there are no references to comments on the site or dashboard.
WordPress SAML 2.0 service provider with optional LDAP. Signed assertions, pinned IdP certificates, NameID account binding, and group-to-role mapping.
A WordPress plugin that restricts the admin area (wp-admin) to an allowlist of IP addresses, CIDR ranges and IPv4 wildcards
Read-only WordPress plugin that audits the Abilities API surface exposed to AI agents (core REST + MCP Adapter). Inventories every Ability, resolves agent exposure, and flags risky combinations.
Stopbot WordPress plugin for Blocker V2 bot protection, traffic filtering, and visitor security logs.
WordPress plugin: layered preview/password protection with multi-language prefix support
WordPress REST API JWT Auth Plugin based on JWT Authentication for the WP REST API
A WordPress security and privacy workflow plugin for SSL enforcement, security headers, two-factor authentication, login protection, session management, and privacy acknowledgment tools.
Hardens the WordPress "Lost Password" page against bots and account enumeration — adds rate limiting, a honeypot field, and generic error responses.
A lightweight WordPress plugin that detects suspicious login activity and alerts the admin.
Provides filters and utilities for sanitizing WordPress post content.
WordPress plugin: know when a plugin changes owner or is closed on WordPress.org, and hold its updates until you have checked it.
WordPress security plugin: per-IP rate limiting for logins, AJAX actions and REST routes, IP allow/block lists (CIDR), Cloudflare-aware, lockout log.
Bot Control – crawler, AI agent and scraper manager for WordPress. WordPress.org edition (GPL-2.0-or-later).