Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
Dependency-free WordPress comment spam protection: honeypot, timing trap, JS challenge, URL limits
A simple yet powerful WordPress plugin that redirects non-logged-in users to a specific page and provides the option to use a custom login URL for enhanced security.
Merged plugin with Security Settings (honeypot, advanced security) and Phone Number Validation always enabled.
Provides a checkbox that lets an administrator permit an editor to use unfiltered HTML
A WordPress plugin that blocks 404 scanners at the Cloudflare edge using IP Access Rules. Works on every Cloudflare plan including Free; authenticates with a scoped API token kept in wp-config.php.
WP-WebAuthn One Time Login Link Provider provides one-time login link capability as a backup for WP-WebAuthn.
WordPress security and activity audit plugin that logs user actions, system events and critical changes to provide full traceability and forensic insight.
WordPress security telemetry streamed to Splunk: HEC log pipeline, scheduled detections, and dashboards — a miniature SOC for a WordPress site
This plugin prevents any user from logging in if they haven't logged in during the previous 90 days.
A custom WordPress plugin that enhances admin security, access control, and dashboard management for improved site administration.
Code snippet plugin to disable theme and plugin editing from the WordPress admin area.
Disable Apache directory browsing (Options -Indexes) by adding a safe, marker-based block to your site’s root .htaccess on activation.
The Disposable Email Validation plugin helps validate email addresses during user signups, ensuring that disposable email addresses are not allowed for registration. It integrates with the check-mail.org API to perform email validation.
WordPress plugin to manage a limit of concurrent sessions per user.
A comprehensive WordPress security and maintenance plugin designed for administrators to protect websites, monitor threats, and maintain optimal site health and security.
Restrict plugin, theme, and WordPress core updates/install/delete/activate capabilities to only specifically allowed admin usernames.
Scan your WordPress site for vulnerabilities and malicious code in themes, plugins, and core files using multiple vulnerability databases.
A WordPress plugin that hardens uploads by blocking common executable file types and PHP code markers.