Block wp-login v1.5.9
Blocks direct access to wp-login.php and replaces it with a secret login URL to reduce brute-force traffic on Apache servers.
Tags / security
1,776 WordPress plugins tagged “security”. Every result links to a crawlable PlugIndex profile.
Blocks direct access to wp-login.php and replaces it with a secret login URL to reduce brute-force traffic on Apache servers.
HSTS is HTTP Strict Transport Security, a means to enforce using SSL even if the user accesses the site through HTTP and not HTTPS.
Sends email notifications if a new version of WordPress available. Notifications about updates for plugins and themes can also be sent.
View and manage all active user sessions in a custom admin screen.
WP fail2ban integration with Gravity Forms to log spam form submissions.
Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.
This plugin will disable file editing tool in your WordPress admin panel.
Disable page editing on selected pages, to protect the pages from accidental or unwanted changes that might break your site.
Clears all domain cookies on logout. Because leaving a trail of cookies is bad.
Stop spam without CAPTCHAs. Proof-of-Work protection for your site. Open-source, self-hosted, privacy-first.
A reimagining of WordPress authentication using modern security practices.
Protect your entire WordPress site with a simple password. GDPR-compliant with modal links for legal pages.
This plugin allows you whitelist IP addresses so Limit Login Attempt plugin doesn't block them.
Fine tuning access to your posts.
Protect your website from AI scraping by adding opt-out instructions to your robots.txt file and including meta tags in the HTML ``.
Blue Captcha is a powerful and highly customized WordPress plugin that effectively protects your WP blogs from spammers and unwanted persons.
Blocks scripted checkout attempts that never loaded your checkout page, including card testing bots that skip CAPTCHA. Classic and block checkout.
Read-only security audit for WordPress: 62 checks including PHP2Shell, an A to F grade, and a checklist that records what you have fixed.
Prevent Cross-Site Request Forgery attacks on your comments form.
Control remote publishing with XML-RPC from the writing settings page.
Disable the default WordPress registration page without disabling user registration.
Quickly block unwanted IPs in your WP site with CDN/proxy-aware IP detection
With a security.txt file, ethical hackers can easily send you a notification when they have found a vulnerability on your website.
Removes your WordPress version from various places.