31
JPKCom Enable Argon2
jpkcom/jpkcom-argon2
Enables ARGON2ID for password hashes.
★ 1stars
32downloads
32
helloLOG
hellolog-io/hellolog-plugin
Lightweight WordPress activity log.
★ 1stars
8downloads
4composer
33
Two Factor Web Authentication
mcguffin/two-factor-webauthn
WebAuthn for the Wordpress Two Factor plugin
★ 4stars
13downloads
34
AI Connector Secure Layer
jazzsequence/ai-connector-secure-layer
Keeps LLM API keys out of the WordPress database. Fetches keys from Pantheon Secrets or environment variables on-demand at the moment an LLM request fires — never stored in wp_options, never pre-loaded…
★ 0stars
7.6kcomposer
35
WW Hide wp-login.php
sjinks/ww-hide-wplogin
A WordPress plugin to hide wp-login.php and use a custom URL for logging in.
★ 3stars
452composer
36
WP Comment Smart Honeypot
freak3dot/wp-smart-honeypot
Wordpress plugin to reduce comment spam with a smarter honeypot.
★ 29stars
37
Have I Been Pwned
coenjacobs/wp-haveibeenpwned
Checks if the password for each WordPress user account has been compromised via haveibeenpwned.com
★ 29stars
38
Limit Logins
lipemat/limit-logins
WordPress plugin to prevent brute force attacks
★ 0stars
2kcomposer
39
scrt.link for WordPress
mikezielonkadotcom/scrt-link-wp
Drop a block onto any page to let visitors send you end-to-end encrypted, self-destructing secrets via scrt.link.
★ 1stars
12downloads
40
GeDefense WP - Open Core
visiongaiatechnology/gedefensewp
GeDefense WP — Open Core is a modular, zero-dependency WordPress security platform designed as a multi-tier security kernel and active defense matrix for PHP 8.1–8.4 and WordPress 6.0+.
★ 2stars
1downloads
41
URL Change Lockdown
bjornfix/url-change-lockdown
Locks WordPress URL changes by blocking programmatic updates to site URLs, permalinks, slugs, and taxonomies.
★ 0stars
81downloads
42
OWC Activity Log
openwebconcept/plugin-owc-activity-log
Tracks all WordPress activity such as posts, meta, options, users, taxonomy, comments, plugins, themes and more.
★ 0stars
426composer
43
GravityForms CSP Fixer
yardinternet/plugin-gravityforms-csp-fixer
Fixes GravityForms plugin, so it is CSP compliant.
★ 0stars
1.2kcomposer
44
Central Hall
indyhall/central-hall
Central Hall is a Wordpress plugin and PFSense "captive portal" solution to manage access to a network via Wordpress login.
★ 1stars
14downloads
≈10active
45
OpenID Connect Single Sign-On
dirtsimple/oidc-sso
OpenID Connect Single-Signon for Wordpress
★ 10stars
98composer
46
Security. Limiting login attempts + 2FA verification.
tikhomirov/wp-limit-login-attempts-plugin
WordPress Security plugin. Limiting login attempts and brute force protection.
★ 2stars
47
All in one Content protection
finland93/allinonecontentprotection
WordPress plugin empowers you to safeguard your website's content effortlessly. With just a click, this plugin adds an extra layer of security and protection to your valuable text, images, and multimedia elements.…
★ 2stars
48
WP Bedrock Auth
aprivette/bedrock-auth
Environment-specific basic auth for the Bedrock WordPress framework
★ 3stars
821composer
49
WP AbuseShield
mikasjp/wp-abuseshield
A simple and lightweight plugin that protects your WordPress against abuse.
★ 14stars
52
REST API Protection
kevorteg/wp-api-protection
Security Suite for WordPress REST API (Anti-Reconnaissance & Hardening).
★ 1stars
2downloads
53
Itineris Prevent WP User Enumeration
itinerisltd/itineris-prevent-wp-user-enumeration
itineris-prevent-wp-user-enumeration
★ 2stars
54
BBS Password Policy
bbs-lab/wordpress-password-policy
Enforce configurable password complexity and mandatory rotation for WordPress administrator (and other) accounts. Built by Big Boss Studio.
★ 0stars
30composer
55
WP customize nonce
riccardooliva91/wp-customize-nonce
A WordPress plugin which allows you to customize the nonce generation and validation.
★ 1stars
6.3kcomposer
57
Bypass Force Login
soderlind/bypass-wp-force-login
Easily add exceptions to WordPress Force Login plugin
★ 5stars
21composer
58
Built Core
builtnorth/built-core-plugin
Core functionality plugin for WordPress
★ 3stars
13downloads
59
FanaByte - External Connection Blocker
fanabyte/fanabyte-external-connection-blocker
Block and Manage Outgoing Connections from Your WordPress Admin Panel
★ 1stars
13downloads
60
401 On Failed Login
amitrahav/wp-401-on-failed-login
Wordpress plugin - Sends Header Status 401 When Login Fails.
★ 3stars
853composer