Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
Disable WP REST API and XMLRPC is a simple WP pluging for site security
A wordpress plugin that implements rate limiting for the CheckoutWC plugin
RoniPass turns a practical WordPress security checklist into enforceable controls, visibility, and clear remediation guidance. It is intentionally conservative: the plugin applies safe application-level protections and reports infrastructure changes that should remain…
Authentication, login, registration, account recovery, identity verification, session security, and access-control foundation for the Sabri Social Homeopathy Platform.
AI moderation for WordPress comments, WooCommerce reviews and bbPress replies: rule screening, toxicity and spam classification, a moderation queue, reply drafts, thread summaries and sentiment.
Integrates your site with CloudFlare so you are able to achieve the true IP address of your site visitors, which by default a Cloudflare IP is shown instead. CloudFlare has released mod_cloudflare…
Tamper-evident, MySQL-backed governance audit log for WordPress. SHA-256 hash chain (audit-stream-py compatible), one-click verify, optional forwarding to the Kinetic Gain audit-stream spine. GPL-2.0.
Adds Wordfence → Access Manager: see who is temporarily locked out by Wordfence's failed-login protection, unblock them, or unblock + allowlist their IP for a limited time. Uses Wordfence's own lockouts, settings…
Manage WordPress login customization and role-based access control.
"Block Login: Restrict user access by blocking selected roles from logging in & redirecting to another page. Easy to install & customize.
A next-generation WordPress security framework providing deep hardening, malware detection, integrity monitoring, and guided server-level remediation.
An addon for MainWP to configure the Google Security For WordPress plugin from the MainWP Dashboard for each child site.
TrustedWeb Security Agent — Open source WordPress plugin for deep security scanning, malware detection, auto-fix and trust badge verification.
Generates and manages one-click links that auto-set hashed WP password cookies, logs usage, and includes token names, copy-to-clipboard, and revoked tokens table. Now includes unified, filterable usage logs below the main table.…
Minimal WordPress request firewall. XML-RPC blocking, bad-UA filters, basic injection signatures, login/XML-RPC rate limits, optional HTTPS enforcement, optional security headers, REST/user-enum hardening, HTTP method gate, lightweight file logging. Settings: Settings → GV…
Comprehensive WordPress REST API security, monitoring, and access control with JWT authentication, rate limiting, and detailed logging.
WordPress plugin to block user login attempts based on email, IP address, or username patterns
WordPress connector for Volance - observe-only form scoring. GPL-2.0-or-later.
This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.
A structured audit logging plugin for WordPress, designed to track user actions, content changes, and system events.