Security
Hardening, firewalls, login protection, scanning, 2FA.
1,266 repositories, including 973 with fewer than two releases. Show released plugins only
This plugin hides the WordPress version number by removing the generator meta tag and replacing ver query parameter from enqueued scripts and styles with the file modification time.
WordPress security plugin (Arabic UI): 2FA, malware & phishing scanning, real-time shell blocking, daily reports, signed self-updates.
Security for WordPress: brute-force lockouts on every way in, account names kept private, breached passwords refused, with a journal and statistics. Runs on your server.
Professional site-stability utility for agencies. Prevent accidental site breakage by locking mission-critical plugins and themes. Includes secure Developer-Key overrides and site-hardening features.
Free WordPress plugin: read-only checks for HTTPS/SSL expiry, mixed content, core file integrity, PHP in uploads, spam/cloaking signs and WooCommerce checkout.
Multi-factor authentication for WordPress: authenticator apps, SMS/WhatsApp/voice via Twilio Verify or Plivo Verify, email codes, backup codes. Developed by Potomac Technologies, LLC.
Netdesign Session Guard: see who is signed in, detect shared accounts, limit devices (WordPress plugin, free on wordpress.org)
Marginal's agency baseline plugin for client WordPress sites: hardening, MainWP connection fixes, and white-labelling.
SM Fix – Security Incident Response for WordPress
WordPress-plugin: bevakar core, plugins, teman och beroenden mot kända sårbarheter (CVSS/CVE) och mejlar rapport
Silence the noise in WordPress. Remove unnecessary features, disable legacy endpoints, and enforce clean, secure defaults for production environments.
Yet Another OAuth2 Server for WordPress (YAOS4WP)
A WordPress plugin to lock out logins after x number of attempts. Users can be unlocked by using the built-in password reset features.
A WordPress plugin that collects the Top Spam IP addresses and lists them on a new admin tools page. Allows to export them and to block via your .htaccess file.
A simple, but complete (down to vector graphics) captcha implementation class. Wordpress plugin. In the beginning of development. September 2013.
A very simple Google reCAPTCHA 2.0 WordPress Plugin with no nags for premium features
The W3TC version 0.9.4.1 support page has a XSS vulnerability. This plugin denies access to ALL users to the W3TC support page, gives you time to change plugins.
The most comprehensive anti-spam solution for WordPress. Protect comments, registrations, logins, and 10+ form plugins.
Check your WordPress site for vulnerabilities against the WPScan vulnerabilities database API.