Security
Hardening, firewalls, login protection, scanning, 2FA.
1,266 repositories, including 973 with fewer than two releases. Show released plugins only
A malware scanner your AI assistant can actually drive. This plugin turns WordPress into a Model Context Protocol (MCP) server, so an AI assistant such as Claude can scan the site on…
Use Twilio (and Authy) to validate new registrations using SMS verification.
Spam protection for WordPress that runs on your own site. No API keys, no accounts, nothing lost.
Custom WordPress plugin for CAMeSM enabling secure, schedule-based voting with ID authentication, audit logging, and full admin control.
Ships Kinsta access logs and per-request user identity to write-only Google Cloud Storage for WordPress incident forensics.
TOTP-based two-factor authentication for WordPress with QR setup, backup codes and role-based enforcement.
Plugin WordPress de sécurité : blocage basique des injections SQL et protection CSRF côté admin.
An unofficial connector plugin that extends the official OOPSpam Anti-Spam plugin with login-page protection. WordPress out of the box has zero spam or bot protection on `wp-login.php`, and the official OOPSpam plugin…
Completely disables comments so that there are no references to comments on the site or dashboard.
WordPress SAML 2.0 service provider with optional LDAP. Signed assertions, pinned IdP certificates, NameID account binding, and group-to-role mapping.
A WordPress plugin that restricts the admin area (wp-admin) to an allowlist of IP addresses, CIDR ranges and IPv4 wildcards
Read-only WordPress plugin that audits the Abilities API surface exposed to AI agents (core REST + MCP Adapter). Inventories every Ability, resolves agent exposure, and flags risky combinations.
Stopbot WordPress plugin for Blocker V2 bot protection, traffic filtering, and visitor security logs.
Security Blocker User-Agent Whitelist - это расширение для плагина "Advanced Security IP Blocker", которое добавляет интеллектуальную систему белого списка User-Agent. Плагин автоматически определяет поисковых ботов и доверенных сканеров, добавляя их IP-адреса в…
WordPress plugin: layered preview/password protection with multi-language prefix support
WordPress REST API JWT Auth Plugin based on JWT Authentication for the WP REST API
A WordPress security and privacy workflow plugin for SSL enforcement, security headers, two-factor authentication, login protection, session management, and privacy acknowledgment tools.
Hardens the WordPress "Lost Password" page against bots and account enumeration — adds rate limiting, a honeypot field, and generic error responses.
A lightweight WordPress plugin that detects suspicious login activity and alerts the admin.
Provides filters and utilities for sanitizing WordPress post content.
WordPress plugin: know when a plugin changes owner or is closed on WordPress.org, and hold its updates until you have checked it.