Security
Hardening, firewalls, login protection, scanning, 2FA.
1,266 repositories, including 973 with fewer than two releases. Show released plugins only
Scrub options, deactivate denylisted plugins, and delete user data on development sites.
WordPress Plugin - Auditing, Malware Scanner and Security Hardening
WordPress Simple SAML plugin
Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.
VietShield WAF - High-performance Web Application Firewall (WAF) for WordPress. Protects against SQL Injection, XSS, RCE, and more with advanced traffic analysis and real-time blocking.
大绵羊外链跳转插件是专为 WordPress 站点开发的外部链接管理插件。插件的主要功能是拦截文章中的外部链接，在跳转前提醒用户即将离开本站，提升用户安全意识并优化用户体验。
Lightweight WordPress firewall — rate-limits endpoints, blocks bots, bans repeat offenders, and adds security headers
Pressable One Click Login WordPress Plugin
WP Force Repair is a specialized recovery tool designed to fix hacked or broken WordPress sites.
Self-hosted behavioral captcha for WordPress — fine-grained interaction analysis, no external service, no tracking.
A WordPress plugin that provides secure, granular access control for media files. Protect your uploads by moving them to a secure location and controlling access through custom control.
Browser security utilities for WordPress/Altis
Pressable Basic Authentication WordPress Plugin
Lightweight malware scanner for WordPress — files, database and vulnerable software. Reports only, never modifies your site.
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
AGPL-3.0 Open-Core security suite for WordPress 6.x / PHP 8.1-8.5: ZEUS pre-boot WAF, AEGIS deep-packet inspection, TRINITY XDR, ThroneGuard privilege lockdown, HADES admin cloaking and PHP upload-progress hardening. Local-first, zero CDN dependencies.
ClassicPress plugin: Limit rate of login attempts, including by way of cookies, for each IP.
Plugin de seguridad para WordPress con firewall de tres capas: bloquea bots, fuerza bruta, SQLi y XSS antes de que WordPress cargue. Libre, rápido y sin servicios externos.
Check your WordPress site against the WP Registry — a public database of hashed plugins, themes, and files. Hash-based vulnerability and malware detection.
Addon plugin for sweetweb theme
WordPress plugin to enable Yubico OTP authentication
Allow multiple passwords for password protected pages and posts.
Delegate OAuth 2 authorization to another WordPress site
Helps keeping WordPress websites secure.
Extends the WordPress Two Factor plugin with advanced role-based controls, forced 2FA methods, and enhanced administrative features for single-site and Multisite installations.
WebAuthn for the Wordpress Two Factor plugin
redirect if not logged in
Part of the foundation series of plugins, this is an internal custom login plugin for Inkfire websites.