WP EXtra – One Click Optimize v8.7.1
Optimize your site instantly with one-click activation. WP Extra offers easy fixes and features for WordPress.
Tags / security
security
1,776 WordPress plugins tagged “security”. Every result links to a crawlable PlugIndex profile.
Manage XML-RPC v1.0.2
Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.
Melapress File Monitor v2.4.0
Get email alerts for file and permission changes on your WordPress sites. No false positives!
WPMasterToolKit (WPMTK) – All in one plugin v2.25.0
Modular WordPress toolkit for security, performance, SMTP, WebP images, code snippets, redirects, administration and more.
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms v1.3.2
Protect your WordPress website from brute force attacks by limiting the number of failed login attempts. Improve security and stop bots.
No CAPTCHA reCAPTCHA v1.3.4
Protect WordPress login, registration, comment and BuddyPress registration forms with Google's No CAPTCHA reCAPTCHA.
RSFirewall! v1.1.49
Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.
Simple Login Lockdown v1.1
Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.
Advanced IP Blocker v8.13.22
A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.
BotBlocker Security – Complete security platform v1.7.6
Complete security platform for everyday: block bots, brute-force, viruses, spam, fake crawlers. WAF, 2FA, no-malware, proactive defense.
Compromise Scanner for wp2shell v1.1.0
Read-only forensic scanner for the WordPress core exploit chain CVE-2026-63030 / CVE-2026-60137 (wp2shell). Reports a scored verdict; changes nothing.
Dam Spam v1.1.8
Spam protection for WordPress registration, login, comments, and contact forms.
DefendWP Firewall v1.1.6
Get instant protection against vulnerabilities disclosed by security companies.
Expire User Passwords v1.4.3
Require certain users to change their passwords on a regular basis.
HSTS Ready v1.06
Enable easily HSTS on your website.
Protection Against DDoS v1.5.2
Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.
Staatic – Static Site Generator for WordPress v1.15.0
Use WordPress as your CMS, then publish a fast, lower-exposure static version of your site.
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… v3.0.9
Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more
WP Anti-Clickjack v1.9.0
Protect your WordPress site from clickjacking with X-Frame-Options and CSP frame-ancestors headers plus a frame breaking script.
WP Author Slug v6
Add a layer of security and prevent your login name from being shown in the author archive's URL.
WP fail2ban Blocklist v2.2.2
WP fail2ban Blocklist is a collaborative preemptive blocklist for WordPress.
Advanced Country Blocker v2.3.2
An advanced security plugin that blocks website visitors by country, with additional features like blacklisting, logging blocked attempts, admin bypas …
Content Security Policy Manager v1.2.1
Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors
CrowdSec v2.13.1
This plugin blocks detected attackers or displays them a captcha to check they are not bots.