Security

WordPress plugin to manage a limit of concurrent sessions per user.

A comprehensive WordPress security and maintenance plugin designed for administrators to protect websites, monitor threats, and maintain optimal site health and security.

Restrict plugin, theme, and WordPress core updates/install/delete/activate capabilities to only specifically allowed admin usernames.

WordPress plugin that adds Google Recaptcha to forms

Simple global password protection for WordPress sites.

Scan your WordPress site for vulnerabilities and malicious code in themes, plugins, and core files using multiple vulnerability databases.

WordPress plugin to help WP sites be https compliant

A WordPress plugin that hardens uploads by blocking common executable file types and PHP code markers.

Developer-first WordPress REST API authentication.

Provides REST API endpoints for security patterns and vulnerability checks

Cancel everything you don't need. Make WordPress more secure. Take care of all your transactions with a single plugin.

This plugin automatically logs out the user after a period of idle time. The time period can be configured from admin end. This is a fork from Idle User Logout by Abiral…

Comprehensive WordPress security scanning with detailed dashboard and history tracking

WordPress account verification, OTP onboarding, login protection, and role-aware redirects.

wp-plugin-password-manager is simple password manager to store password

为 WordPress 登录、注册和找回密码接入阿里云验证码 2.0（Web/H5 V3）。

Wordpress Password Authentication Update

a wordpress plugin which help you protect, maintained and scan the critical threats out of your website.

Automatically expire passwords after 90 days

IP Block protection for WooCommerce (ip-block.com integration). Untested at the moment — please feel free to modify. GPLv3.

Add anti spam protection using an invisible spam trap.

fix for really-simple-ssl plugin

Wordpress Plugin to monitor login attempts and blacklist them automatically

Restrict media-library PDF files to logged-in users, and optionally the PDF.js Viewer full-screen URL. Blocked visitors are sent to a page you choose.

Plugin de wordpress para crear hashes criptográficos precisos para todos los recursos cargados externamente utilizando atributos SRI en el código HTML

Sets a random daily password on a chosen page (content gate) and exposes REST endpoints to rotate/fetch it. Built for n8n-driven daily rotation.

A WordPress Plugin to display Markdown documentation files from your filesystem directly inside the WordPress Dashboard.

When you mark a live user as a spammer, that user can still surf around and cause havoc on the site until that person is logged out. This plugin stops live spammers…