Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
Extends the WordPress Two Factor plugin with advanced role-based controls, forced 2FA methods, and enhanced administrative features for single-site and Multisite installations.
Part of the foundation series of plugins, this is an internal custom login plugin for Inkfire websites.
Rename the WordPress login URL to a custom slug for enhanced security. Includes brute force protection and IP whitelist management.
Secure and customise your WordPress login page with custom URLs, stunning visual styles, and complete branding control.
Minimal WordPress security plugin: blocks REST API user enumeration, hides server metadata, and protects wp-login.php against brute force attacks.
Adds a button to reset the WordPress plugin update cache and force a check for updates. This plugin is especially helpful when testing plugin updates.
WordPress hardening with Cloudflare edge enforcement — login protection, 2FA, security headers, and one-click WAF deployment.
WordPress Security Plugin - Protects against XSS, file injection, brute force, XML-RPC attacks, and more. By Sravan M
"WordPress optimization plugin with security and performance toggles. Includes brute force login protection, XMLRPC blocking, Heartbeat API control, emoji and oEmbed disabling, and a media library size viewer."
Behavioral WAF plugin for WordPress — 44 attack patterns, per-IP scoring with decay, 6 threat levels with auto-response