Best hacking plugins for WordPress
The most popular hacking plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Exploit Scanner leads with 8K+ active installs, ahead of Exploit Scanner for Active Theme (20+) and Proxy Hacking Protection (10+). All 6 plugins tagged “hacking” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 5 hacking plugins
- 1.Exploit Scanner
The most installed hacking plugin, with 8K+ active installs. Rated 3.2 from 40 reviews, last updated 8 years ago. Tested only up to WordPress 4.7.39.
- 2.Exploit Scanner for Active Theme
20+ active installs. No reviews yet, last updated 10 years ago. Tested only up to WordPress 4.8.34.
- 3.Proxy Hacking Protection
10+ active installs. No reviews yet, last updated 10 years ago. Tested only up to WordPress 4.3.34.
- 4.HTTP Digest Authentication
10+ active installs. Rated 4.0 from 5 reviews, last updated 8 years ago. Tested only up to WordPress 4.9.35.
- 5.
Guard10+ active installs. No reviews yet, last updated 10 years ago. Tested only up to WordPress 4.7.39.
All 6 plugins tagged “hacking”
Exploit Scanner
#2,415by Donncha O Caoimh (a11n)9 years ago
Search the files and database of your WordPress install for signs that may indicate that it has fallen victim to malicious hackers.
- Installs
- 8K+
- Rating
- 3.2(40)
- Downloads
- 24/day
Exploit Scanner for Active Theme
#27,402by Tauno Hanni10 years ago
Detects whether your theme files have fallen victim to malicious hackers.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
Proxy Hacking Protection
Up in the last 7 days:90#28,904by niyari11 years ago
To prevent a reduction in the search results by the replication of illegal content.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
HTTP Digest Authentication
#32,584by Jesin A9 years ago
Protect your wp-login.php page with HTTP Digest Authentication without the need of adding web server modules or changing config files.
- Installs
- 10+
- Rating
- 4.0(5)
- Downloads
- 0/day

Guard
#46,031by Mitch10 years ago
Guard protects your wp-admin against bruteforce attacks.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day