1
Require Email 2FA
WP Registry grade A. No security issues foundGradeANo security issues foundWP Registry
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
★ 1179≈30
2
WordPress hardening with Cloudflare edge enforcement — login protection, 2FA, security headers, and one-click WAF deployment.
★ 010