Security
Hardening, firewalls, login protection, scanning, 2FA.
1,280 repositories, including 979 with fewer than two releases. Show released plugins only
Converts a designated site on a WordPress Multisite network (or a single site installation) into a highly configurable honeypot to capture, log, and block malicious traffic/bots.
WP REST Protect is a WordPress must-use (MU) plugin that restricts the WordPress REST API access.
Keeps AI/MCP connector plugins (e.g. Novamira) switched off in WordPress unless you’re using them.
A small, honest WordPress firewall. No cloud, no telemetry, no upsells - just deterministic protections for shared-hosting sites.
This plugin for WordPress is swiss army knife for the most perfect PHP firewall for the paranoid people out there. Now nothing will call make a connection into the outher world, even…
All-in-One AI-powered spam protection, bot detection, and login security firewall for WordPress.
A WordPress plugin to easily add Google reCPATCHA v2 spam protection to following core WP forms: login, lostpassword, register and comments.
Disposable Email Checker for Wordpress using the api-aries email check endpoint
Stops WordPress being used as a spam relay. Intercepts every outbound email, enforces rate limits and a recipient allowlist, and names the exact file sending it. Comment and registration shields, one-click diagnostics…
Plugin for WordPress to Protection User Enumeration Protection
Lightweight WordPress plugin to manage WordPress authentication cookie lifetimes and optionally log users out after inactivity.
Scope WordPress Application Passwords to named abilities and post types, with expiry and revoke.
Log all WordPress user creation with origin tracking (IP, backtrace, source detection)
Change the default WordPress login URL to a custom one for better security.
WordPress plugin to protect the search endpoint from DDoS abuse. Born from a WCEU 2026 talk.
Hafif WordPress güvenlik eklentisi: XML-RPC'yi kapatır, REST API'yi kısıtlar, şifre sıfırlama/kayıt işlemlerini engeller, wp-admin'i korur, brute force koruması ekler ve WP sürümünü gizler.