Security
Hardening, firewalls, login protection, scanning, 2FA.
1,280 repositories, including 979 with fewer than two releases. Show released plugins only
Excludes Affiliates Registration Form from reCAPTCHA validation provided by Wordfence
Japanese Spam & Malware Cleaner is a lightweight security scanner for WordPress. It helps you spot and quarantine common database and file‑based infections used in “Japanese keyword hacks” and similar compromises.
WordPress security hardening checklist, configuration examples, and incident-response notes.
Dependency-free WordPress comment spam protection: honeypot, timing trap, JS challenge, URL limits
A simple yet powerful WordPress plugin that redirects non-logged-in users to a specific page and provides the option to use a custom login URL for enhanced security.
Merged plugin with Security Settings (honeypot, advanced security) and Phone Number Validation always enabled.
Provides a checkbox that lets an administrator permit an editor to use unfiltered HTML
WP-WebAuthn One Time Login Link Provider provides one-time login link capability as a backup for WP-WebAuthn.
WordPress security and activity audit plugin that logs user actions, system events and critical changes to provide full traceability and forensic insight.
Plugin de segurança para WordPress com proteção de login, autenticação OTP, auditoria, controle de usuários, arquivos, formulários e REST API.
WordPress security telemetry streamed to Splunk: HEC log pipeline, scheduled detections, and dashboards — a miniature SOC for a WordPress site
This plugin prevents any user from logging in if they haven't logged in during the previous 90 days.
A custom WordPress plugin that enhances admin security, access control, and dashboard management for improved site administration.
AI generated Wordpress plugin. Google reCAPTCHA v3 or Cloudflare Turnstile CAPTCHA comment security.
Code snippet plugin to disable theme and plugin editing from the WordPress admin area.
Disable Apache directory browsing (Options -Indexes) by adding a safe, marker-based block to your site’s root .htaccess on activation.
The Disposable Email Validation plugin helps validate email addresses during user signups, ensuring that disposable email addresses are not allowed for registration. It integrates with the check-mail.org API to perform email validation.