Best security plugins for WordPress

Skt NURCaptcha

Up in the last 7 days:38#15,352

by Carlos E. G. Barbosa3 months ago

NURCaptcha inserts a reCAPTCHA on the Register Form of your site to protect it against spambots.

Anti-Hacker

Up in the last 7 days:46#15,362

by emiliocini2 years ago

Anti-Hacker protects your Wordpress against hackers attacks, hiding sensitive information that would be used to exploit your site, detecting and fixin …

Secure HTTP Headers

Down in the last 7 days:27#15,400

by shasha3105 years ago

Secure HTTP headers - Essential, and easy.

TrafficGuard PPC Fraud Prevention

Up in the last 7 days:314#15,467

by Trafficguard8 months ago

Protect your Google Ads budget with TrafficGuard's PPC protection.

AJAX Comments

Up in the last 7 days:43#15,509

by DjZoNe19 years ago

Post comments quickly without leaving or refreshing the page.

Add Target Fixer

Up in the last 7 days:5#15,541

by shortdark5 years ago

Fixes the target="_blank" vulnerability by adding rel="noopener noreferrer" to the 'a' tag.

Disable Pingbacks

Down in the last 7 days:55#15,554

by Glen Scott9 years ago

This plugin disables the Pingback functionality in your blog.

Interaktiv Security Scanner

Up in the last 7 days:3#15,599

by Interaktiv4 days ago

Scans WordPress for known vulnerabilities and unexpected file integrity changes.

WP Theme Plugin Editor Disable

Down in the last 7 days:156#15,703

by Yslo9 years ago

This plugin disable Wordpress Theme/Plugin Editor.

All in One Content Protector & Security

Down in the last 7 days:53#15,708

by Mahesh Thorat17 days ago

Find and fix security problems: a site scanner, vulnerability and file change alerts, login and bot protection, and safe fixes you can undo.

Selective Image Guard

Up in the last 7 days:55#15,718

by Jose Mortellaro1 month ago

Protect your images from unauthorized downloads and scraping.

Bottle

Up in the last 7 days:288#15,790

by benrowland12 days ago

Bottle is a bot throttling plugin.

Beagle Security

Down in the last 7 days:71#15,938

by beaglesecurity2 years ago

SECURE YOUR WEBSITE FROM THE LATEST VULNERABILITIES WITH THE EASY TO USE WEBSITE PENETRATION TESTING TOOL

Batch REST Guard

Down in the last 7 days:63#15,942

by vladanrs3 months ago

Block wp2shell REST batch attacks (CVE-2026-63030). Detect fake admins and backdoor plugins. Extra security for hacked sites.

SpamJam

Down in the last 7 days:69#15,968

by Matt Biscay4 days ago

Block comment and form spam without CAPTCHAs. Lightweight honeypot protection works automatically and keeps real visitors moving.

Watermark PDF for WordPress and WooCommerce

Down in the last 7 days:12#15,986

by GrandPlugins9 months ago

Watermark PDF for WordPress and WooCommerce is an easy-to-use plugin that lets you add text and image watermarks to PDF files to protect them from una …

WorkflowDone Geo Blocker

Up in the last 7 days:228#16,036

by workflowdone4 months ago

Block website access based on visitor's geographical location. Simple and effective geo-blocking for WordPress.

WP Guardian

Down in the last 7 days:30#16,096

by Ciprian Popescu1 month ago

For site owners who want an honest hardening checklist, not a heavy security suite: what to fix in WordPress, and what to ask your host for.

Aipatch Security Scanner

Up in the last 7 days:13#16,131

by Esteban6 months ago

WordPress security scanner with 36 checks, malware scanning, core integrity verification, remediation, and 23 MCP abilities.

Gravity Forms

Down in the last 7 days:14#16,173

by Timothy Wood11 years ago

An addon to Gravity Forms to add an option to force your forms to be loaded SSL only.

Who Changed It?

Down in the last 7 days:171#16,293

by Guido Schad2 months ago

Activity log and audit trail: see who changed what, and when — logins, users, plugins, themes, posts, settings. Tamper-proof. Stays on your site.

Biometric Authentication

Up in the last 7 days:567#16,321

by Ivan Kristianto9 days ago

Passkeys are a safer and easier alternative to passwords. Simply use your fingerprint or face ID to log in with ease.

OOPVulns

Down in the last 7 days:103#16,402

by oopspam Team3 months ago

Monitor your WordPress site for security vulnerabilities in core, plugins, and themes.

Zero Budget Bot Shield

Down in the last 7 days:84#16,526

by Sam9 months ago

Free, lightweight WordPress plugin that blocks bots by country and prevents abuse via repeated 404 errors. Perfect for small organizations.

LGPD Framework By Data443

Down in the last 7 days:70#16,563

by Data443 Risk Mitigation, Inc.1 day ago

Easy to use tools to help you meet LGPD compliance requirements. Fully documented, extendable and developer-friendly. Free, friendly support! Include …

Web-Art Login Shield with reCAPTCHA

Down in the last 7 days:140#16,568

by WEB-ART Creative Design4 days ago

Protect WordPress logins and Elementor Login/Forms using Google reCAPTCHA v2/v3 and optional IP-based lockouts.

Disable Directory Listings

Up in the last 7 days:21#16,678

by Scott Reilly15 years ago

Prevent virtual directory listing services from listing the contents of directories, and/or show a page in place of a directory's listing.

Redirect WordPress Sign-up for iThemes Security

Down in the last 7 days:133#16,685

by Michal Danko9 years ago

This plugin redirects WordPress Sign-up to homepage if is activated "Hide Backend" module in iThemes Security settings.

Spam Defender

Down in the last 7 days:74#16,727

by Raisul Islam Shagor5 months ago

Add captcha to WooCommerce product reviews. Prevent spam reviews and ensure only real customers can submit reviews.

Under Construction Per Page

#16,743

by hyvikk4 years ago

This plugin helps you setup under construction content for each page so that your user can't see original content until you finish working on it.

Random File Upload Names

Up in the last 7 days:176#16,788

by wpza6 years ago

This plugin from WPZA provides your website randomised file names when you upload files into WordPress.

Pow Captcha

Down in the last 7 days:392#16,840

by aeyoll1 month ago

Adds Pow Captcha verification to forms to prevent spam and bot submissions.

Virus Finder

Down in the last 7 days:186#16,884

by wphospital.hu7 months ago

Find viruses in your WordPress easily. Virus scan, malware finder.

SiteFort Security

#16,955

by securewpteam5 days ago

Free WordPress security with dynamic bot detection, network threat intelligence, cloud-assisted malware scans, login security and vulnerability detect …

Password Strength Requirements for Woocommerce

Down in the last 7 days:52#17,002

by Bizstudio2 years ago

Short Description: A plugin to customise password strength requirements in WooCommerce.

No Register & Comments XD

Up in the last 7 days:179#17,130

by 希扎尔 (Xī zhā ěr)2 months ago

A professional security plugin to block public registration and comments while maintaining full administrative control with detailed activity logs.

WP Plugin Security Check

Up in the last 7 days:62#17,258

by ldebrouwer15 years ago

WP Plugin Security Check checks if your WordPress plugins are 'safe'.

WPSecureOps Connector

#17,304

by Guido Schad2 months ago

Forward completed Wordfence scan findings to your WPSecureOps dashboard, so one team can triage alerts across every site it looks after.

ProtectCopyBlogs [Protect your WordPress Blogfrom fraudulent copies]

Down in the last 7 days:136#17,337

by johnugeorge16 years ago

This plugin will Prevent and CopyProtect Your Wordpress Blog from fraudulent copies .

Disable Right Click & Content Copy Protection

Up in the last 7 days:229#17,375

by Mathew2 months ago

Content protection plugin that disables right-click, prevents copying, and blocks image dragging with customizable settings and notifications.

Eazy Plugin Manager

Up in the last 7 days:17#17,388

by EazyPlugins2 months ago

Powerful Plugin Management Solution for WordPress

s2member Secure File Uploader

Down in the last 7 days:12#17,433

by Lew Ayotte13 years ago

A s2member add-on that allows you to upload a file to the s2member-files/ secure directory and automatically insert a link into your post.

Deerwood Country Access

Up in the last 7 days:132#17,547

by DeerwoodMedia13 days ago

Country blocking and intelligent IP protection for WordPress, powered by Cloudflare.

Hide Username Front Side

Up in the last 7 days:213#17,620

by Mindstien Technologies12 years ago

Secures your wp site from hackers by hiding username of members from front side.

Bearmor Security

Up in the last 7 days:158#17,663

by bearmor14 days ago

Completely free WordPress security: firewall, 2FA with authenticator app, malware scan, file integrity, vulnerability alerts, AI summary.

Ambiscale Activity Manager

Down in the last 7 days:132#17,666

by Ambiscale2 months ago

Monitor your website by logging all activities - from user behavior to system-level changes - giving you complete visibility directly from dashboard.

Better Headers

Up in the last 7 days:179#17,687

by bettersecurity2 years ago

Improve the security of your website by easily setting HTTP response headers to enable browser protection

Forge12 Security

Up in the last 7 days:1,443#17,717

by Forge12 Interactive GmbH6 days ago

Firewall, malware scanner, 2FA and login protection that keeps your visitors' data on your own server. No CDN, no tracking, made in Germany.

Captcha Spam Blocker

Down in the last 7 days:143#17,751

by botezatu1 year ago

Enhance your site’s security with dynamic CAPTCHA, blocking spam and bot access on forms. GDPR-compliant.

Lana Security

Down in the last 7 days:114#17,859

by Lana Codes4 years ago

Security plugin to protect website with login captcha, hide version number and security monitor