“force”
23 repositories, including 9 with fewer than two releases. Show released plugins only
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
Extends the WordPress Two Factor plugin with advanced role-based controls, forced 2FA methods, and enhanced administrative features for single-site and Multisite installations.
Part of the foundation series of plugins, this is an internal custom login plugin for Inkfire websites.
Rename the WordPress login URL to a custom slug for enhanced security. Includes brute force protection and IP whitelist management.
Secure and customise your WordPress login page with custom URLs, stunning visual styles, and complete branding control.
Minimal WordPress security plugin: blocks REST API user enumeration, hides server metadata, and protects wp-login.php against brute force attacks.
Adds a button to reset the WordPress plugin update cache and force a check for updates. This plugin is especially helpful when testing plugin updates.
WordPress-Plugin der Freien Gestalterischen Republik: Login-URL verstecken und individuell anpassen
WordPress hardening with Cloudflare edge enforcement — login protection, 2FA, security headers, and one-click WAF deployment.
A multi-site aware, WordPress mu-plugin to enforce WordPress Two-Factor, a 2FA plugin, security for all user roles at the point of registration.
WordPress Security Plugin - Protects against XSS, file injection, brute force, XML-RPC attacks, and more. By Sravan M
"WordPress optimization plugin with security and performance toggles. Includes brute force login protection, XMLRPC blocking, Heartbeat API control, emoji and oEmbed disabling, and a media library size viewer."
Bypass WordPress.org's 24h/6h Protect the Shire update cooldown by installing plugin/theme releases directly from the WordPress.org API.
Behavioral WAF plugin for WordPress — 44 attack patterns, per-IP scoring with decay, 6 threat levels with auto-response
Lets animated WebP upload without generating subsizes (which often fails). Forces GD first, allows .webp.
An unofficial connector plugin that extends the official OOPSpam Anti-Spam plugin with login-page protection. WordPress out of the box has zero spam or bot protection on `wp-login.php`, and the official OOPSpam plugin…
Prepublish quality checks for WordPress posts: live in the editor, enforced at publish
Plugin to force website to always show the most up-to-date stylesheets