Enforce SSL URLs using WordPress filters and permanent redirects. No configuration required.
Zero-config WordPress hardening: blocks user enumeration, rate-limits password resets, genericizes login errors. Installable from wp-admin, runs as mu-plugin (MIT)
Small plugin to disable the UI options to install/uninstall plugins in WordPress
Tryggere side.
itineris-prevent-wp-user-enumeration
[WordPress Plug-in] Killer Pads is a plugin like security pads for "prevention is better than cure". It activates the default configuration of security and operational efficiency to WordPress websites.
WordPress plugin to whitelist Jetpack IPs for XML-RPC access
Plugin for use implementing security enhancements to the Wikimedia Foundation's sites hosted on WordPress VIP.
Wonder Shield security plugin for WordPress
Hide WordPress files and directories, and removes unnecessary metadata for enhanced security.
WordPress plugin: configurable password complexity and mandatory rotation for privileged accounts.
AGoodMonitor — WordPress health reporter plugin
Security & protection improvements: login event history, prevent login brute force, hide backend, update status API
WordPress Security & Performance Booster — disable auto-updates, block spam (comments, pingbacks, XML‑RPC), hide admin notices, and optimize admin performance. Ideal for staging and expert-managed sites.
A WP plugin that replaces the default WordPress login URL with a custom slug and adds optional security features to protect against brute force attacks.
Lightweight yet powerful WordPress security framework focused on zero-trust architecture, cryptographic API authentication, distributed threat sharing, infrastructure hardening, rate limiting, CIDR protection, replay attack defense, and high-performance security without unnecessary overhead.
WordPress hardening with Cloudflare edge enforcement — login protection, 2FA, security headers, and one-click WAF deployment.
综合安全套件 (SBA) WordPress 综合安全套件 是一个集站点行为审计、iOS风格登录面板、SMTP邮件配置于一体的安全增强插件，专为中小型网站设计，提供易用的安全防护和用户体验优化。
Adds basic security features to WordPress
Security and maintenance controls for WordPress: hide update noise, restrict risky tools, and safely switch users for testing.
Allow disabling of admin menu items, & plugin, theme chaning / installations / deleting / updating
Erzwingt sichere Passwörter für ausgewählte WordPress-Benutzerrollen, werbefrei
Curly Site Tools — site-level hardening & behavior toggles for Curly Sprout WordPress sites (Tools > Curly Site Tools). Updates via GitHub Releases + plugin-update-checker.
Jembatan AI profesional untuk WordPress: hardening gerbang MCP Adapter resmi + 8 kemampuan konten SEO end-to-end (AI Puffer, Rank Math, audit SEO, AI-detector & plagiarisme Winston AI). Professional AI bridge for WordPress…
CoreSlim: zero-bloat WordPress core optimizer & speed switch. Disable emojis, XML-RPC, embeds, version disclosure, Heartbeat, revisions and autosave overhead with zero bloat. Free, GPL-2.0-or-later.