Security
Hardening, firewalls, login protection, scanning, 2FA.
120 repositories, including 46 with fewer than two releases. Show released plugins only
VietShield WAF - High-performance Web Application Firewall (WAF) for WordPress. Protects against SQL Injection, XSS, RCE, and more with advanced traffic analysis and real-time blocking.
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
Check your WordPress site against the WP Registry — a public database of hashed plugins, themes, and files. Hash-based vulnerability and malware detection.
Extends the WordPress Two Factor plugin with advanced role-based controls, forced 2FA methods, and enhanced administrative features for single-site and Multisite installations.
WebAuthn for the Wordpress Two Factor plugin
Part of the foundation series of plugins, this is an internal custom login plugin for Inkfire websites.
Rename the WordPress login URL to a custom slug for enhanced security. Includes brute force protection and IP whitelist management.
Your friendly WordPress security inspector. Keeps a history of every report, so you can see what is new, what is fixed, and what is next.
The Hack Repair Guy’s Group Password Reset plugin is a native WordPress admin tool that lets administrators bulk reset passwords by scope, skip excluded usernames, and send secure password reset links to…
Site hardening, admin and media tools, cache refresh, and profile enhancements.
Password protects all pages and posts except the front page
Free WordPress plugin that checks a site for PHP2Shell and wp2shell exposure and signs of compromise. By Jeremy Anderson Tech.
Lightweight email-based two-factor authentication for WordPress admin access.
Advanced view of activity log and writing activity to file or Elasticsearch for use in security auditing. Especially useful if monitoring multiple instances.
Lightweight yet powerful WordPress security framework focused on zero-trust architecture, cryptographic API authentication, distributed threat sharing, infrastructure hardening, rate limiting, CIDR protection, replay attack defense, and high-performance security without unnecessary overhead.
Extension for MainWP Dashboard. Checks the child websites plugins for vulnerability using the WordFence intelligence api.
Repository for WordPress-Plugin Encrypt AI Connector Keys
WordPress plugin for Cap — self-hosted proof-of-work CAPTCHA integration for forms and comments.
Automatic inactivity logout with closed-tab server-side protection, customizable countdown warning popup, and full bilingual support (IT/EN).
Security without the Fear-Mongering.
Integrate Outline VPN with DT for extra login security
Secure and customise your WordPress login page with custom URLs, stunning visual styles, and complete branding control.