Security Plugins

Compromise Scanner for wp2shell ↗

Read-only forensic scanner for the WordPress core exploit chain CVE-2026-63030 / CVE-2026-60137 (wp2shell). Reports a scored verdict; changes nothing.

WP Anti-Clickjack ↗

Protect Your WordPress Site From Clickjacking Attacks by Adding the X-Frame-Options Header and Owasp's Legacy Browser Frame Breaking Script.

UsersWP – ReCaptcha ↗

ReCaptcha addon for UsersWP.

WP Advanced Math Captcha ↗

Protect your WordPress site with a powerful and user-friendly Math Captcha. Now with seamless WooCommerce, WPForms, and Formidable Forms integration!

Meta Generator and Version Info Remover ↗

This plugin will remove the version info appended to enqueued style and script urls along with Meta Generator in the head section and in RSS feeds.

ReCaptcha Integration for WordPress ↗

reCaptcha for login, signup, comment forms, Ninja Forms and woocommerce.

Log HTTP Requests ↗

Log and view all WP HTTP requests

HTTP Security Header ↗

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks ↗

Simply disable XML-RPC on your WordPress site with a simple toggle switch. Protect your site from XML-RPC attacks and improve security.

Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file ↗

Simple editor htaccess file without using FTP client.

Remove Meta Generators ↗

Remove all meta generator tags for all plugins. No settings necessary! Install and activate.

Prevent XSS Vulnerability ↗

This WP plugin blocks XSS by encoding harmful URL characters & safely handling HTML in $_GET. Customizable settings for enhanced website security.

Forget Spam Comment ↗

The ultimate solution to stop spam comments in the default commenting system of WordPress

Hide Comment Author Link ↗

Use Hide Comment Author Link plugin and easily disable comment author url from your WordPress site.

WP 2-step verification ↗

Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.

WP Fail2Ban Redux ↗

Records various WordPress events to your server's system log for integration with Fail2Ban.

HTTP Auth ↗

Provides comprehensive security during development by protecting your entire site and your admin pages from brute-force attacks.

Show IP address ↗

A simple plugin to show your visitor’s IP address on pages, posts, widgets, and the admin dashboard. Lightweight and easy to use.

Duo Universal ↗

Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users.