“hardening”

Comprehensive security hardening for WordPress - addresses user enumeration, version disclosure, and other vulnerabilities

WordPress plugin that generates downloadable vCard (.vcf) contact files for employees from ACF fields. Includes an AJAX generate button, a 12-hour WP-Cron job, bilingual (FR/EN) job titles and security hardening (nonces, capability…

Core security, performance, and widget visibility MU-plugin for pausatf.org

Super light and sleek WordPress plugin for site security and access control - minimal footprint, maximum protection

Agrad Toolkit unifies our WordPress hardening and WooCommerce utilities: toggle XML-RPC, REST, Gutenberg, /agrad-admin, HTTP allowlists, and update stubs; expose a key-protected health API; and run tools like the text replacer, discount…

Just another security plugin.

Lightweight WordPress plugin for basic security hardening

Stardust Security Wordpress Plugin

A utility WordPress plugin for site security, email deliverability, and other advanced features.

A lightweight WordPress security audit toolkit for reviewing common configuration and security posture checks.

Adds frontend password strength validation to the WordPress Reset Password page with customizable minimum requirements. Includes admin settings panel and server-side validation.

Lightweight WordPress hardening: security headers, login attempt limiting, username-discovery blocking and version hiding. Every option can be switched off.

Improves Wordpress speed and security, removes unnecessary features, adds multiple layers of protection against common attack vectors

This WordPress plugin allows you to assign plugin install capabilities on a user-by-user basis.

Must-Use (MU) plugin that hardens and locks down the WordPress admin dashboard for demo and client sandbox accounts. Removes sensitive menus, widgets, admin bar nodes, and blocks direct URL access without the…

Hardening estrutural para WordPress

Various security fixes for WordPress

Security scanner for your WordPress website

This plugin disables WordPress's XML-RPC system.

This plugin will remove comments, emojis, enforce better login errors, clean wp head and lots of other stuff. use at your own will

WP REST Protect is a WordPress must-use (MU) plugin that restricts the WordPress REST API access.

Wordpress plugin to add a delay to the login step

Keeps AI/MCP connector plugins (e.g. Novamira) switched off in WordPress unless you’re using them.

Plugin for WordPress to Protection User Enumeration Protection

Change the default WordPress login URL to a custom one for better security.

Hafif WordPress güvenlik eklentisi: XML-RPC'yi kapatır, REST API'yi kısıtlar, şifre sıfırlama/kayıt işlemlerini engeller, wp-admin'i korur, brute force koruması ekler ve WP sürümünü gizler.

Strips sensitive product data (stock quantities, sales counts, cost-of-goods) from unauthenticated WooCommerce REST API responses. Authenticated API key holders see the full response.

Security, firewall, access control and data protection for WordPress and its REST API. Authentication, JWT support, route policies, rate limiting, response hardening and WordPress security tools in a single plugin.