Host Header Injection Fix v3.7
Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.
Tags / security
1,776 WordPress plugins tagged “security”. Every result links to a crawlable PlugIndex profile.
Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.
Give trusted web professionals admin access to your WordPress account. Revoke anytime.
Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.
This plugin generates the proper security HTTP response headers to keep your site secured.
See Security Ninja vulnerabilities and security test results in your MainWP dashboard.
Define and enforce password policies for your WordPress site with length, complexity, and expiration rules.
FREE passwordless 2FA login for WordPress. Secure your admin account with one-click install.
Protect against user enumeration attacks on author pages and other places where valid user names can be obtained.
Adds a secret URL key to access the login page and lets you disable XML-RPC, protecting against bruteforce attacks.
A simple yet powerful plugin that redirects users to a custom URL after logout. Featuring a modern, accessible admin panel with dark mode support.
Protect your WooCommerce store from fake orders by blocking suspicious IPs, emails, and detecting bot checkout activity.
A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.
Free WordPress firewall, bot blocking, login protection, and malware scanning. See suspicious traffic and investigate threats from your dashboard.
Logify WP - Activity Log & User Audit Log tracks critical changes, logins, and updates with searchable logs for site security.
With Rename Plugins Folder you can rename the plugins folder. This is an underestimated way to increase the security of your installation.
Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress.
Disable plugins without deleting them. Archive in one click, restore any time, and keep the archive hidden and blocked from the web.
Optimize, secure, and speed up WordPress: trim front-end bloat, clean the database, block attacks and spam, and purge every cache in one click.
Essential tools for WordPress site administrators to monitor versions, enhance security, and improve performance.
Protect your WordPress website with WEDOS Global: cloud WAF, DDoS protection, CDN and page cache, set up from WordPress.
Signs and encrypts emails using PGP/GPG keys or X.509 certificates. Provides OpenPGP and S/MIME functions via WordPress plugin API.
Enhanced Login Security for Your Wordpress blog.
It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.
Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database