Security
Hardening, firewalls, login protection, scanning, 2FA.
1,148 repositories, including 885 with fewer than two releases. Show released plugins only
Create a temporary WordPress admin user to provide access on support issues, etc.
Wordfence security abilities for MCP. Monitor security status, manage blocked IPs, view scan issues, and control lockouts.
WordPress plugin for 2 factor authentication (TOTP and SMS)
Encrypted, password-controlled WordPress file delivery with expiry and revocation; tested on Apache and nginx. https://kieransimkin.co.uk/
Block comment spam using a continuously-updated blocklist of 64,000+ known spam terms.
Lightweight yet powerful WordPress security framework focused on zero-trust architecture, cryptographic API authentication, distributed threat sharing, infrastructure hardening, rate limiting, CIDR protection, replay attack defense, and high-performance security without unnecessary overhead.
Extension for MainWP Dashboard. Checks the child websites plugins for vulnerability using the WordFence intelligence api.
A zero-tolerance WordPress security plugin that locks down your site tighter than Fort Knox. Because paranoia is just good planning.
Block junk search traffic, harden public endpoints, and manage crawl-facing protection rules from one admin page.
Checks if the password for each WordPress user account has been compromised via haveibeenpwned.com
Repository for WordPress-Plugin Encrypt AI Connector Keys
Adds audit functionality for S3 Uploads actions. Add-on for the S3 Uploads plugin.
Prevent people or bots from registering with certain email domains or full addresses.
Keeps LLM API keys out of the WordPress database. Fetches keys from Pantheon Secrets or environment variables on-demand at the moment an LLM request fires — never stored in wp_options, never pre-loaded…
Require members to use “Strong” passwords based on required characters.
Generate and rotate secure one-click administrator login URLs from inside WordPress.
Track high-privilege WordPress and WooCommerce admin activity with filters, guard controls, and audit logging.
WordPress plugin for Cap — self-hosted proof-of-work CAPTCHA integration for forms and comments.
Disallows bad WordPress plugins
Automatic inactivity logout with closed-tab server-side protection, customizable countdown warning popup, and full bilingual support (IT/EN).
WordPress plugin to limit the Access-Control-Allow-Origin header to only allowed origins.
Security without the Fear-Mongering.
Facilitates SSO login to WordPress via Cloudflare Access.
Enterprise grade WordPress Security, Continuous Validation, Safe Updates, and Recovery Platform.
ovos codesafe for WordPress — from the first threat to the verified patch. Connects a site to codesafe, which detects the attacks on it and the errors in its code, shields against…
Enable WordPress features: SVG uploads and more.