Security Plugins
Firewalls, malware scanning, login protection, and site hardening.
214 plugins
Read-only forensic scanner for the WordPress core exploit chain CVE-2026-63030 / CVE-2026-60137 (wp2shell). Reports a scored verdict; changes nothing.
Protect Your WordPress Site From Clickjacking Attacks by Adding the X-Frame-Options Header and Owasp's Legacy Browser Frame Breaking Script.
ReCaptcha addon for UsersWP.
Protect your WordPress site with a powerful and user-friendly Math Captcha. Now with seamless WooCommerce, WPForms, and Formidable Forms integration!
This plugin will remove the version info appended to enqueued style and script urls along with Meta Generator in the head section and in RSS feeds.
reCaptcha for login, signup, comment forms, Ninja Forms and woocommerce.
Log and view all WP HTTP requests
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
Simply disable XML-RPC on your WordPress site with a simple toggle switch. Protect your site from XML-RPC attacks and improve security.
Simple editor htaccess file without using FTP client.
Remove all meta generator tags for all plugins. No settings necessary! Install and activate.
This WP plugin blocks XSS by encoding harmful URL characters & safely handling HTML in $_GET. Customizable settings for enhanced website security.
The ultimate solution to stop spam comments in the default commenting system of WordPress
Use Hide Comment Author Link plugin and easily disable comment author url from your WordPress site.
Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.
Records various WordPress events to your server's system log for integration with Fail2Ban.
Provides comprehensive security during development by protecting your entire site and your admin pages from brute-force attacks.
A simple plugin to show your visitor’s IP address on pages, posts, widgets, and the admin dashboard. Lightweight and easy to use.
Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users.
Whitelabel your site by hiding wp-login.php in the login and registration URLs