Viktor’s Login Probe Protection

Viktor’s Login Probe Protection adds a signed token to each supported login form. A login request is accepted only when its token is valid, has not expired, and has not already been used.

The plugin protects the standard WordPress login form, forms rendered with wp_login_form(), and WooCommerce customer login forms. Tokens expire after 10 minutes.