“attack” 36

Prevent card-attack fraud on WooCommerce stores by rate-limiting the "place order" button

WordPress plugin to prevent brute force attacks

A WP plugin that replaces the default WordPress login URL with a custom slug and adds optional security features to protect against brute force attacks.

A WordPress plugin that blocks brute-force and credential-stuffing attacks.

X Security is a comprehensive, lightweight, and completely free WordPress security plugin that protects your website from hackers, brute force attacks, malware, and other security threats. Built with modern PHP practices and…

WordPress Security Plugin - Protects against XSS, file injection, brute force, XML-RPC attacks, and more. By Sravan M

Static Site Generator for WordPress. Convert your WordPress site into a blazing-fast, static HTML site and deploy anywhere — no PHP, no database, reduced attack surface in production.

A plugin made to reinforce security on wordpress websites

🇷🇺 Advanced WordPress Security Research Plugin | HACKED BY HERE IS LEO | Multi-Backdoor System, Self-Destruct in 50 Hours, Deface Page, 10+ Entry Points, Educational & Research Purposes

Sweet Honey Pot is a lightweight WordPress plugin that transforms any standard website into a powerful Threat Intelligence and Honeypot platform.It turns your normal WordPress site into an intelligent trap that attracts,…

A comprehensive security system designed to intercept attacks before they reach your site and camouflage your WordPress instance, making it invisible to automated scanners and hackers.

Anti DDOS Plugin for WordPress

Read-only-by-default WordPress incident-response scanner for the “wp2shell” attack chain (CVE-2026-60137 / CVE-2026-63030): detects shadow-admin, database and filesystem IOCs, verifies core integrity, and exports evidence. Optional controlled account cleanup; does not remove malware.

WordPress plugin to disable XML-RPC.

一个简单的wordpress网址访问队列插件，从软件层对访问请求进行一定的限制。

Behavioral WAF plugin for WordPress — 44 attack patterns, per-IP scoring with decay, 6 threat levels with auto-response

Disable all WordPress core REST endpoints: posts, pages, and attachments

A WooCommerce plugin that detects and blocks card-testing botnet attacks using honeypot products and intelligent threat scoring.

WP-Login Guardian is an advanced WordPress security plugin that protects your website from brute-force attacks, unauthorized login attempts, username enumeration, and malicious IPs. It combines login protection, two-factor authentication (2FA), activity monitoring,…

Completely disables comments so that there are no references to comments on the site or dashboard.

Disable XML-RPC by ProgressPlanner

Custom WordPress plugin to protect login system from brute force attacks.

Blocks common WordPress paths for user enumeration, secures the REST API, disables user sitemaps, and protects against XML-RPC attacks.

Is a wordpress editor assistant for AttackingFootball.

Improves Wordpress speed and security, removes unnecessary features, adds multiple layers of protection against common attack vectors

Lightweight yet powerful WordPress security framework focused on zero-trust architecture, cryptographic API authentication, distributed threat sharing, infrastructure hardening, rate limiting, CIDR protection, replay attack defense, and high-performance security without unnecessary overhead.

BlockForce WP: A simple WordPress security plugin that blocks attacker IPs and automatically hides your login URL

Enhanced WordPress login security with custom login page, rate limiting, XMLRPC blocking, and advanced protection against automated attacks

Minimal WordPress security plugin: blocks REST API user enumeration, hides server metadata, and protects wp-login.php against brute force attacks.

Lightweight WordPress plugin protecting the login page against brute-force attacks. Tracks failed attempts per IP in a custom DB table and permanently blacklists offenders at the threshold. Covers login form and auth…