“hardening” 64

A plugin for WordPress to restrict information passed via the WordPress HTTP API. Not affiliated in any way, shape, or form with WordPress.org or Automattic.

A plugin to enhance 829 Studios WordPress websites.

Browser security utilities for WordPress/Altis

Helps keeping WordPress websites secure.

Resolves critical security vulnerabilities: WordPress login protection, HTTPOnly cookie implementation, and comprehensive GraphQL security. Addresses security audit findings automatically.

Manage access to the WP REST API with rate limits and IP-based rules.

KW Security Plugin

Taming your WordPress user sessions, to help reduce the chance of session hijacking

Hide default WordPress login routes behind a private URL and reduce public access to login entry points.

Block junk search traffic, harden public endpoints, and manage crawl-facing protection rules from one admin page.

Omni Performance Hardening — single-file WordPress plugin that tames expensive endpoints (search scans, archive queries, low-value feeds, oEmbed, XML-RPC) with CDN-friendly cache headers. 收斂 WordPress 高成本端點的單檔外掛，並提供 CDN 友善快取標頭。

Enable WordPress features: SVG uploads and more

WordPress plugin to limit the Access-Control-Allow-Origin header to only allowed origins.

Disable WordPress XML-RPC via actions and filters.

Companion plugin for the Signal & Noise theme — SEO, login hardening, first-party edge analytics, Cloudflare purge, music/discography sync, and native wp-admin tooling built on the WP 7.0 Abilities API + AI…

Checks if the password for each WordPress user account has been compromised via haveibeenpwned.com

GeDefense WP — Open Core is a modular, zero-dependency WordPress security platform designed as a multi-tier security kernel and active defense matrix for PHP 8.1–8.4 and WordPress 6.0+.

Opinionated overrides for default WordPress behaviour.

Locks WordPress URL changes by blocking programmatic updates to site URLs, permalinks, slugs, and taxonomies.

A simple and lightweight plugin that protects your WordPress against abuse.

Hide WordPress files and directories, and removes unnecessary metadata for enhanced security.

AGoodMonitor — WordPress health reporter plugin

Security Suite for WordPress REST API (Anti-Reconnaissance & Hardening).

itineris-prevent-wp-user-enumeration

Enforce configurable password complexity and mandatory rotation for WordPress administrator (and other) accounts. Built by Big Boss Studio.

A WordPress plugin which allows you to customize the nonce generation and validation.

Core functionality plugin for WordPress

Block and Manage Outgoing Connections from Your WordPress Admin Panel

This plugin disables password login for all users, allowing only authentication via other methods (e.g. SSO).

WordPress plugin. Prevents logged-out users from obtaining a list of user names and email addresses via the REST API.