Security

Fail-ban + Cloudflare Turnstile integration for WordPress login/register/lostpassword + custom login page.

Monitors WordPress core, theme, and plugin directories for file changes and sends notifications alerts when files are added, modified, or removed.

WordPress plugin to add authorization to WP-API /wp/v2/users endpoints

Notifies users by email each time a successful login happens with their account.

Battle-tested MU-plugin collection — CSP with nonce injection, login fortification, REST API scoping, and runtime integrity checks

Wtyczka umożliwia menadżerom wgrywanie dokumentów, a klientom ich pobieranie po weryfikacji danych osobowych.

SpamNix helps reduce comment spam with lightweight detection layers.

Evidence-first local security auditing for WordPress sites. Free edition.

Defensive security toolkit for WordPress Blue Teams: hardening audit, core checksum verification, firewall, custom rules, TOTP 2FA, and audit logging.

** In development ** Advanced passive CAPTCHA for Gravity Forms. Blocks bots without user interaction using timing, JS execution, fingerprinting (WebGL/JA3), nonce, session, IP/UA checks, rate limiting & IP lists. Features configurable…

Hide Login URL — hide wp-login.php behind a custom URL for WordPress

admin notification for (admin,editor) role creation or modify

5-layer hybrid Intrusion Detection System for WordPress (ML + LLM). PFE ISIMa.

This is a WordPress Security Plugin, which helps improve WordPress Security Related Settings, including Rate Limiting.

Test project

reCaptcha for-WooCommerce-Bot Protection Porto Theme Compatibility

Make the Wordpress REST API more Secure by only allowing certain REST Endpoints for logged-out users

Block visitors by IP/CIDR and by country (via CDN/host headers). Optional Apache .htaccess integration for IP-only blocking.

Detect and block disposable or temporary email addresses in comments, registrations, and contact forms — with full GDPR/CCPA-compliant logging and developer hooks, for WordPress

Removes sections of thumb path within attachment metadata when updated, if path attempts to access another directory.

Customize your login URL slug and block default login routes if enabled.

Powerful Recaptcha For WordPress & Woocommerce

Disable XMLRPC Completely. Also, allow Updates on Git-Controlled Websites

A set of encryption/decryption functions based on Laravel Encryption class.

Easily add Google reCAPTCHA v3 to WooCommerce CheckOut page and forms to prevent spam.

Comprehensive security hardening for WordPress - addresses user enumeration, version disclosure, and other vulnerabilities

WordPress plugin: shows which copy of a site you're on, holds emails on staging and local copies, and keeps them out of search engines.

Mason WordPress plugin which implements improvements to the WordPress login page.

Wordpress doesn't verify file extensions when media is uploaded. This plugin will detect the filetype and append the correct extension if it is not present.