Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
This plugin automatically logs out the user after a period of idle time. The time period can be configured from admin end. This is a fork from Idle User Logout by Abiral…
Comprehensive WordPress security scanning with detailed dashboard and history tracking
WordPress account verification, OTP onboarding, login protection, and role-aware redirects.
Unified spam protection engine for registrations, logs, and IP blocking.
Protect WordPress from brute force attacks with custom login URLs, rate limiting lockouts, and emergency anti-lockout recovery.
a wordpress plugin which help you protect, maintained and scan the critical threats out of your website.
IP Block protection for WooCommerce (ip-block.com integration). Untested at the moment — please feel free to modify. GPLv3.
Wordpress Plugin to monitor login attempts and blacklist them automatically
Restrict media-library PDF files to logged-in users, and optionally the PDF.js Viewer full-screen URL. Blocked visitors are sent to a page you choose.
Sets a random daily password on a chosen page (content gate) and exposes REST endpoints to rotate/fetch it. Built for n8n-driven daily rotation.
A WordPress Plugin to display Markdown documentation files from your filesystem directly inside the WordPress Dashboard.
When you mark a live user as a spammer, that user can still surf around and cause havoc on the site until that person is logged out. This plugin stops live spammers…
A WordPress plugin to add the Google Recaptcha on a multisite environment
A free, open-source WordPress plugin for enabling two-factor authentication on your sites
Lightweight WordPress plugin protecting the login page against brute-force attacks. Tracks failed attempts per IP in a custom DB table and permanently blacklists offenders at the threshold. Covers login form and auth…
A WordPress firewall plugin that automatically detects and bans malicious IPs. Features brute force protection, directory scan detection, plugin enumeration monitoring, and a REST API honeypot.
WordPress Plugin to remove the WordPress user list from the API.
WordPress plugin that enhances the WordPress login process by adding an extra layer of security through a two-factor authentication mechanism. Users will receive a unique code via email that must be entered…
Redirects users to root domain before template loading. Useful when the WordPress installation is a sub-folder REST API and you want to restrict its public access. This behaviour won't affect requests to…