Security

Email 2FA for WordPress login - a 6-digit one-time code by email, no app or SMS. Works with Wordfence, custom login pages, and multisite.

itineris-prevent-wp-user-enumeration

Fix password when migrated from WP 6.8 or above

[WordPress Plug-in] Killer Pads is a plugin like security pads for "prevention is better than cure". It activates the default configuration of security and operational efficiency to WordPress websites.

WordPress plugin for vulnz

Wordpress Wordfence blockings log

WordPress plugin to whitelist Jetpack IPs for XML-RPC access

Protects WordPress against brute-force attacks by automatically blocking malicious IPs and adding lightweight 2FA.

Plugin for use implementing security enhancements to the Wikimedia Foundation's sites hosted on WordPress VIP.

Basic Wordpress Security plugin

Easily integrate Google reCAPTCHA Enterprise with WordPress.

Content Freeze Out is a WordPress plugin that lets an administrator temporarily freeze content changes during maintenance windows, launches, and migrations.

Wonder Shield security plugin for WordPress

Hide WordPress files and directories, and removes unnecessary metadata for enhanced security.

WordPress plugin: configurable password complexity and mandatory rotation for privileged accounts.

Erhalte regelmäßige Sicherheitsüberprüfungen, Schwachstellenberichte, Sicherheitsempfehlungen und individuelle Sicherheitsmaßnahmen für Deine Webseite – mit nur wenigen Klicks.

Attempts to block fradulent payments

Extends content moderation functionality of a WordPress site.

AGoodMonitor — WordPress health reporter plugin

Deep site inspection, hidden error illumination, and diagnostic auditor for forgotten corners of WordPress.

Encrypted, password-controlled WordPress file delivery with expiry and revocation; tested on Apache and nginx. https://kieransimkin.co.uk/

WordPress-Plugin der Freien Gestalterischen Republik: Login-URL verstecken und individuell anpassen

Security & protection improvements: login event history, prevent login brute force, hide backend, update status API

WordPress login Plugin

WordPress plugin of the mindtwo monitoring suite: CMS-specific collectors, WP-Cron push and a signed pull endpoint on top of mindtwo/base-monitoring.

WordPress Security & Performance Booster — disable auto-updates, block spam (comments, pingbacks, XML‑RPC), hide admin notices, and optimize admin performance. Ideal for staging and expert-managed sites.

GoWP Agent Connector — WordPress plugin for automated backups and restore

Wordpress Plugin that queries the visitor IP address against proxycheck.io via API. If the IP returns as proxy (VPN, compromised server, blacklisted, etc) it is redirected to a block page hosted by…

Web application firewall (WAF) and reflection barrier defending WordPress against botnets and exploits.