Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
Built your site as static HTML but kept WordPress for the forms? Bunker locks the parts bots hammer (login page, XML-RPC, REST API, username scans, PHP in uploads) and leaves your forms…
A Wordpress Plugin Limits users to a single active session. When a user logs in, any existing sessions are ended. Includes admin settings for role-based configuration and responsive styling.
WordPress proof-of-work bot shield — no CAPTCHA, no third-party services, SHA-256 puzzles, adaptive difficulty, Cloudflare & caching plugin compatible
House WordPress plugin: username-enumeration hardening for sites on purchased themes, opt-in headers and file-editor lock
Intercepts user enumeration attempts early and prevents cron option data pollution.
Renames uploaded video files to a random hash and routes them into /ppv/ for security.
Validates the email address using emaillistverify.com during user registration, and prevents registration if invalid.
Plugin to get rid of WordPress Comment Spam, Akismet fails to do so even on low traffic sites.
Enhance site security with access protection features provided by SiteLock.
WordPress activity log plugin: records post, media, user and plugin events in a read-only admin log.
A comprehensive WordPress activity tracking plugin that logs user actions, detects suspicious activity, and enhances website security by monitoring all administrative and user activities.
Converts a designated site on a WordPress Multisite network (or a single site installation) into a highly configurable honeypot to capture, log, and block malicious traffic/bots.
WP REST Protect is a WordPress must-use (MU) plugin that restricts the WordPress REST API access.
A free-to-use Wordpress Plugin offering global toggles for security and more.
Keeps AI/MCP connector plugins (e.g. Novamira) switched off in WordPress unless you’re using them.