Security
Hardening, firewalls, login protection, scanning, 2FA.
1,280 repositories, including 979 with fewer than two releases. Show released plugins only
Secure Temporary Login & Audit Log for WordPress professionals (WP-CLI supported).
Restrict website access by visitor country using a local IP geolocation database. No external APIs required.
Adds IP addresses to a Cloudflare list when login or password reset attempts use blocked usernames (e.g. admin, root). Pair with a Cloudflare WAF custom rule to block listed IPs.
WordPress AI comment spam filter plugin — AI 反垃圾评论插件. Context-aware spam detection via OpenAI-compatible Chat Completions API (DeepSeek by default); spam goes straight to Trash. WordPress 5.8+ / PHP 7.4+
WordPress Application Layer is a plugin that sits between the WordPress REST API and your client applications. It lets you control exactly what data is exposed, who can access it, how it…
Add HTTP Basic Authentication to /wp-admin/, wp-login.php, REST API, and PHP files to enhance backend security.
A simple plugin to password protect your WordPress site using HTTP authentication, cookies, and a settings page.
HumanGuard - Advanced multi-layer anti-bot & registration security plugin for WordPress, Tutor LMS, and WooCommerce. Built by zohodigital.com.
Disables XML-RPC, hides login page, adds rate limiting, and enhances WordPress security.
SiteSecure is a WordPress security plugin that helps protect your site from common threats
Security hardening for WordPress: REST API protection, emoji removal, and more.
Extension to Ultimate Member for resetting password at first User login.
VGT Security Lockdown is not a conventional security plugin. It is a modular interceptor—an autonomous security core that embeds itself deep within the WordPress runtime environment upon first launch and enforces a…
Check your WordPress website for headers that are common for security purposes.
Tracks wp-admin edits to posts/custom post types and taxonomies, and stores an audit trail in a dedicated SQL table.
A WordPress plugin that disables application passwords for accounts humans use
A WordPress plugin that displays admin users on the login page for quick, passwordless login
Extension to Ultimate Member for logging of the UM Google reCAPTCHA Scores to a file with .CSV format.
Refuerzo de seguridad en un solo archivo: límite de intentos de acceso, error genérico en el acceso, sesiones más cortas, XML-RPC y pings cerrados, usuarios menos visibles, cabeceras de seguridad, escaneo diario…
Some servers, like those running PHP on fast-cgi need a custom flavor of the content WordPress adds to .htaccess in order for the Application Passwords plugin to operate correctly. This plugin makes…
A wordpress plugin that implements rate limiting for the CheckoutWC plugin
RoniPass turns a practical WordPress security checklist into enforceable controls, visibility, and clear remediation guidance. It is intentionally conservative: the plugin applies safe application-level protections and reports infrastructure changes that should remain…
Плагин двухфакторной аутентификации для Администратора WordPress «Second Password Admin».
Integrates your site with CloudFlare so you are able to achieve the true IP address of your site visitors, which by default a Cloudflare IP is shown instead. CloudFlare has released mod_cloudflare…