Security
Hardening, firewalls, login protection, scanning, 2FA.
263 plugins with two or more releases. Show all 1,148
Enhanced WordPress login security with custom login page, rate limiting, XMLRPC blocking, and advanced protection against automated attacks
Behavioral WAF plugin for WordPress — 44 attack patterns, per-IP scoring with decay, 6 threat levels with auto-response
Hide the WordPress login URL behind a custom slug. In-house plugin for Clear pH Design sites on Flywheel.
Site-wide Cloudflare Turnstile protection for Jetpack forms.
Uses AJAX to check if user is still logged in and kicks them out via a dialog with a countdown that sends them to the WP login page.
A simple plugin that removes all urls from Wordpress comments after 30 days.
wordpress lite security plugin
Harden WordPress login security with custom slugs, rate limiting, recovery tokens, and Site Health integration.
This plugin automatically enables Jetpack's "WordPress.com Secure Sign On" module in production sites.
A wordpress plugin for checking TCPA litigate Number
Disable REST API endpoints and apply additional callbacks to restrict them
WordPress Plugin: Send an email to the user when someone successfully logs into their account.
Prevents a common cache poisoning scenario on enterprise websites
A WordPress plugin that blocks 404 scanners at the Cloudflare edge using IP Access Rules. Works on every Cloudflare plan including Free; authenticates with a scoped API token kept in wp-config.php.
Wordpress Plugin
Block user registration site-wide — WordPress core, WooCommerce, BuddyPress, REST API and more.