Security
Hardening, firewalls, login protection, scanning, 2FA.
1,280 repositories, including 979 with fewer than two releases. Show released plugins only
Adds Google reCAPTCHA v2, reCAPTCHA v3, or Cloudflare Turnstile protection to WordPress login, registration, lost-password, and comment forms.
WordPress plugin that logs failed login attempts for support diagnostics
Log admin logins and plugin/theme installs, activations, deactivations, deletions to a plain text file
A free, open-source WordPress plugin for enabling two-factor authentication on your sites
A plugin designed to automatically maintain certain IP ranges in the whitelist of the WordPress security plugin WordFence.
A Wordpress plugin that generates an login URL that automatically logs you in.
Authenticate support team members to securely log them in to client sites via TrustedLogin
Password-protects WooCommerce checkout on non-production environments. Fails open — production domains are never protected. Admins bypass automatically.
An easy-to-use plugin designed to restrict, block, or whitelist IP addresses, providing effective protection against unwanted DDOS attacks. This tool helps enhance your website's security by preventing unauthorized access and guarding against…
Strips sensitive product data (stock quantities, sales counts, cost-of-goods) from unauthenticated WooCommerce REST API responses. Authenticated API key holders see the full response.
Блокирует регистрацию (стандартную WordPress и WooCommerce), если email не с российского домена
See every device signed in to WordPress, revoke one, and limit sessions per role.
Zero-admin-UI bot and brute-force protection for WordPress and WooCommerce. Honeypot, timing trap, and login lockout that covers every auth vector: wp-login, WooCommerce, XML-RPC, REST.
Security, firewall, access control and data protection for WordPress and its REST API. Authentication, JWT support, route policies, rate limiting, response hardening and WordPress security tools in a single plugin.
Exploration: scoping individual WordPress Application Passwords by role, capability group, read-only, Abilities API, and expiry.
Lightweight anti-bot/spam protection for WordPress (honeypot + nonce + timestamp), built for BCM Network.
Stops update_options calls from wp-gdpr-compliance version 1.4.2 and lower. Install as mu-plugin if you are managing MANY sites or if you are an ISP/webhost. Best is to upgrade to 1.4.3 immediately.
Security, access control and data protection for headless WordPress. Authentication, JWT support, route policies, rate limiting, response hardening and WordPress security tools in a single plugin.
Encode strings or words that are sensitive, vulgar, or violate guidelines within the comments.
BlockForce WP: A simple WordPress security plugin that blocks attacker IPs and automatically hides your login URL
Adds a lightweight math CAPTCHA to WordPress login, Contact Form 7, and WooCommerce forms.
Disable all logins on a site, in WordPress (allows Rest API)
WordPress plugin to add privacy-focused HTTP security headers with sensible defaults that won't break your site.