Plugin Directory

Patchstack – WordPress & Plugins Security

Patchstack

Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.

AntiVirus

pluginkollektiv

Security plugin to protect your blog or website against exploits and spam injections.

WPVulnerability

ROBOTSTXT.es

Get WordPress vulnerability alerts from the WPVulnerability Database API.

Lockdown WP Admin

Sean Fisher

Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.

WPScan – WordPress Security Scanner

ethicalhack3r

WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.

IP Geo Block

tokkonopapa

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Security Ninja – WordPress Security & Firewall

cleverplugins

WordPress security plugin: free 8G firewall/WAF, 50+ tests, vulnerability/core scanning, events logging, AI reports.

Prevent XSS Vulnerability

Sami Ahmed Siddiqui

This WP plugin blocks XSS by encoding harmful URL characters & safely handling HTML in $_GET. Customizable settings for enhanced website security.

DefendWP Firewall

revmakx

Get instant protection against vulnerabilities disclosed by security companies.

Compromise Scanner for wp2shell

eyesecurity

Read-only forensic scanner for the WordPress core exploit chain CVE-2026-63030 / CVE-2026-60137 (wp2shell). Reports a scored verdict; changes nothing.

WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite

WP Doctorワードプレスドクター

This plug-in can exhaustively scan program files on the site to detect malware and vulnerability. Also record hacking attempts against your site and b …

Security Ninja For MainWP

Lars Koudal

See Security Ninja vulnerabilities and security test results in your MainWP dashboard.

SecuSeek – Web Security Scanner & Vulnerability Assessment

SecuSeek

Professional web security scanning and vulnerability assessment plugin. Comprehensive security analysis, real-time threat detection, and detailed secu …

OOPVulns: Vulnerability Scanner

OOPSpam Team

Monitor your WordPress site for security vulnerabilities in core, plugins, and themes.

Aipatch Security Scanner

Esteban

WordPress security scanner with 36 checks, malware scanning, core integrity verification, remediation, and 23 MCP abilities.

SiteFort Security – Malware Scanner, Firewall, Login Security & Hardening

securewpteam

Prevention-first WordPress security with malware scanning, firewall, bot protection, 2FA, vulnerability scanning, and security hardening.

Gauntlet Security

Cornelius Bergen

Performs a detailed security analysis of your WordPress installation. Provides specific instructions on how to make your site more secure.

Vulnerabilities Check

sensorete

Check for known vulnerability of wordpress, plugins and themes. At the end, you can request a quote for assistance.

NIS2 Compliance

Babini Mazzari

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

CRA Vuln Notify

macroncode

Monitors plugin/theme vulnerabilities and manages Cyber Resilience Act (CRA) notification deadlines, with a dashboard and ready-to-use drafts.

Whook Security

darteweb

License URI: http://www.gnu.org/licenses/gpl-2.0.html Our plugin Scans other plugins vulnerabilities listed in the WPScan Database of vulnerabilitie …

CyStack Security – Vulnerability Scanner & Security Monitoring

CyStack

CyStack Security constantly monitors your websites and servers to detect security issues and vulnerabilities.

InTouch Integrity Guard

intouchdesigndev

A lightweight file integrity checker, hardening toggles and opt-in known-vulnerability alerts — built to never slow your site down.

Plugonix Health Monitor

Aman Brar

Scores every installed plugin's health from 0–100 based on update recency, popularity, and compatibility signals from WordPress.org.