Security

Comprehensive security hardening for WordPress - addresses user enumeration, version disclosure, and other vulnerabilities

WordPress plugin: shows which copy of a site you're on, holds emails on staging and local copies, and keeps them out of search engines.

Mason WordPress plugin which implements improvements to the WordPress login page.

Wordpress doesn't verify file extensions when media is uploaded. This plugin will detect the filetype and append the correct extension if it is not present.

mu-plugins

WordPress 2FA Plugin

EmailSherlock Email Guard: block disposable and undeliverable email addresses at form submit in WordPress (comments, registration, WooCommerce, Contact Form 7, WPForms, Gravity Forms).

This plugin integrates Google's reCAPTCHA to the default WordPress Registration system.

autologin-from-hashkey is the wordpress plugin

This plugin integrates Google's reCAPTCHA to the default WordPress Login system.

Mason WordPress plugin which implements central authentication.

Keep spam registrations out without a captcha

Professional malware detection and safe auto-repair for WordPress, built for speed and trust on shared hosting.

Disables various seldom used features of WordPress to improve security. Works for standard and bedrock WordPress installs. Each feature can be toggled under Settings > General > Hardening, or locked from config…

Disables the comment submit button for 30 seconds after page load, providing a very simple layer of spam protection with no bloat (1 line of JavaScript)

PoC reCAPTCHA ~ personal use

Uses OpenRouter LLM to classify and flag spam comments automatically.

Core security, performance, and widget visibility MU-plugin for pausatf.org

A security-hardened WordPress debug log viewer. View, search, and manage wp-content/debug.log from the admin dashboard with Debug Bar integration.

Demo plugin with Elementor compatibility: live editor alerts and robust save enforcement.

WordPress plugin for spam and abuse protection using browser fingerprinting. Rate-limit comments, logins, registrations, forms and downloads.

Securely upload files to Wordpress using the WP-JSON API. Only logged in Wordpress users with the appropriate roles will be granted access to those files.

yuz-cmt : durcissement des commentaires pour limiter les abus et renforcer la modération.

Wordpress içinden erilşim litesini tarar.

It is a WordPress plugin that allows you to edit htaccess online

Deflect Bots with Honey trap and Time to fill. A wordpress bot deflector

Adds Security Header to WordPress

For Hostinger hosting - force the ability to allow creation of application passwords