1
Require Email 2FA
WP Registry grade A. No security issues foundGradeANo security issues foundWP Registry
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
★ 2180≈30
2
Lightweight must-use WordPress plugin with a settings page. Hides WP version, enables & sanitizes SVG uploads, configures SMTP, supports common analytics/measurement codes, and is fully compatible with WordPress Multisite.
★ 08