wordpress-security

There are 8 repositories under wordpress-security topic.

• olacabs / jackhammer

  Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

  application-securitydynamic-analysismobile-securitynetwork-securitypenetration-testingpenetration-testing-frameworksecuritysecurity-scannersecurity-vulnerability-assessmentsource-code-analysisstatic-code-analysisvulnerability-assessmentvulnerability-managementvulnerability-scannersvulnerability-scanningwebappsecwordpress-security
  Language:Java 716

• swisskyrepo / Wordpresscan

  WPScan rewritten in Python + some WPSeku ideas

  pythonwordpresswordpress-pluginwordpress-themevulnerabilitiesvulnerability-scannerswpscanwordpress-scannerwordpress-securityhacktoberfest
  Language:Python 614

• szepeviktor / waf4wordpress

  WAF for WordPress 🔥 with 60+ security checks and weekly updates

  wordpressfail2banpluginwaffirewallsecuritywordpress-security
  Language:PHP 119

• KodoPengin / GameIndustry-hosts-Template

  Unique host templates to enhance own privacy in games, websites and regulary software on Desktop and Android devices

  privacy-protectiongamesgameanalyticsprotectionhostshostsfilesecuritygaming-softwareadblockiot-securityspieleentwicklungsteam-gamesgog-galaxyepic-games-launcherwindows-10-spywaredatenschutzspiele-analyticsspywaregame-analyticswordpress-security
  73

• chrispetrou / FastAudit

  :shipit: A wordpress security auditor! Audit your wordpress application for security issues with even 1 request.

  wordpress-securitysecuritywordpresstoolauditingenumerationshodanwpscan-vulnerability-databasevulnerabilitiesusername-checkerpassword-checkerhardeningpentestingwordpress-security-scanner
  Language:Python 37
• wp-vulnerability-check

  umutphp / wp-vulnerability-check

  A command line took to check the WPScan Vulnerability Database via API to identify the security issues of WordPress plugins installed.

  wordpresswordpress-pluginsecuritycontinuous-integrationvulnerability-checkerwordpress-securitywordpress-security-scannerhacktoberfest
  Language:PHP 37

• pluginkollektiv / antivirus

  Useful plugin that will scan your theme templates for malicious injections. Automatically. Every day. For more blog security.

  wordpress-pluginwordpressantiviruswordpress-securityhacktoberfest
  Language:PHP 36

• fjarrett / prevent-concurrent-logins

  Prevents users from being logged into the same WordPress site from multiple places.

  wordpresswordpress-pluginwordpress-securitymembership
  Language:PHP 24

• centminmod / centminmod-fail2ban

  fail2ban setup for centminmod.com LEMP stack with CSF Firewall

  fail2bancsfcentoscentminmodcloudflarenginxnginx-fail2banfail2ban-filterwordpresswordpress-securitybots-protection
  Language:Shell 22

• relarizky / wpenum

  Simple Bash Script For Collecting Wordpress Username

  bash-scriptenumerationreconnaissancewordpresswordpress-security
  Language:Shell 21

• fjarrett / expire-passwords

  Require certain users to change their passwords on a regular basis.

  wordpresswordpress-pluginwordpress-security
  Language:PHP 20

• jurerotar / Wordpress-security-and-performance

  Apache configuration and useful functions for more secure and performant Wordpress sites.

  wordpresssecuritywordpress-securityapachephpwphtaccesswordpress-development
  Language:PHP 17

• chesio / bc-security

  Helps keeping WordPress websites secure.

  wordpresswordpress-pluginwordpress-security
  Language:PHP 13

• pluginkollektiv / blacklist-updater

  Automatic updating of the comment blacklist in WordPress with antispam keys from GitHub.

  wordpresswordpress-securityantispam
  Language:PHP 13

• pluginkollektiv / checksum-verifier

  Verifies MD5 checksums of WordPress core files, sends e-mail to the mail address of your admin user warning in case of threat. Just activate it and you are done.

  wordpress-pluginwordpresswordpress-security
  Language:PHP 11

• littlebizzy / security-guard

  Super easy security for WordPress

  wordpresswordpress-pluginwordpress-security
  10

• riotkit-org / wordpress-hardened

  Secure and performant Wordpress installation on your Kubernetes cluster

  wordpresswordpress-automationwordpress-updaterdockerdocker-composesupervisordhardenedkubernetesnginxnonroot-useropenshiftrootless-containerswafweb-application-firewallwordpress-securitywordpress-kubernetesmultirunp2clik8s
  Language:Shell 10
• wp-ezpz-tweaks

  WPEzPz / wp-ezpz-tweaks

  WP EzPz Tweaks is an all-in-one WordPress plugin that helps you personalize the admin panel appearances, clean your site code and remove unwanted features to increase its security and improve performance.

  wpwordpresswordpress-pluginwordpress-loginwordpress-securitywordpress-optimizationtweakswordpress-performancewordpress-brandingwordpress-customization
  Language:PHP 8

• Ayesh / WordPress-Password-Hash

  Wordpress plugin to change its password hashing mechanism with PHP native password_* set of functions.

  wordpresswordpress-pluginwordpress-securityphp-bcryptbcrypt
  Language:PHP 7

• EngineScript / EngineScript

  EngineScript is a super fast WordPress server built on Ubuntu and optimized for Cloudflare and Digital Ocean

  nginxnginx-configurationmariadbwordpresslinux-serverlinux-server-auto-installserver-automationnginx-auto-cofigurationwordpress-autoinstallwordpress-siteubuntuwordpress-securityphp8digitaloceandigital-oceancloudflarewordpress-performancesenseisensei-lmswordfence
  Language:Shell 7

• robertpeteuil / wordfence-lockout-msgs

  Wordfence Custom "Lockout" and "Blocked" Messages that Maximize Security by minimizing information provided to attackers

  wordpress-pluginwordpresswordpress-plugin-developmentsecurityweb-securitywordpress-securitywordfence
  Language:PHP 7

• tinaponting / protect-wordpress

  Protect wordpress with .htacess for paranoid bloggers

  cybersecurityhtaccesshtaccess-snippetsprotectsecurityspeedwordpressweb-securityhtaccess-securitywordpress-securityskydda-wordpress
  7

• entr0pie / wp-multi-bruteforce

  Script for bruteforcing multiple Wordpress Users (XMLRPC)

  brute-forcebrute-force-attacksbruteforce-wordlistbruteforcingwordpresswordpress-apiwordpress-securitywordpress-sitexmlxmlrpcxmlrpc-bruteforcer
  Language:Python 6

• riotkit-org / waf-proxy

  Web Appliaction Firewall reverse-proxy using Coraza WAF + Caddy with ready-to-use rulesets

  caddycloud-native-securitycoraza-wafdependabotdistrolessgolangk8sk8s-securitykubernetesopenshiftreverse-proxyriotkitrootless-containerssecuritywafweb-application-firewallwordpresswordpress-security
  Language:Jinja 6
• WordPress-Security-Scanner-advanced-use

  VolkanSah / WordPress-Security-Scanner-advanced-use

  Advanced use of WPScan (WordPress Security Scanner) with other tools like nmap, nikto, owasp-zap, ids for ethnical Hackers

  niktonmappenetration-testingredteamredteam-toolssecuritysecurity-toolswordpresswordpress-securitywpscanwpscannerpentestingsecurity-auditsecurity-automationvulnerability-scannersowasp-zapintrusion-detection-systemwordpress-security-scanner
  6
• WordPress-Plugin-Default-Config

  Codeconut-Ltd / WordPress-Plugin-Default-Config

  WordPress plugin with some hardcoded, opinionated defaults for enhanced security and frontend performance. Reduced feature set that might not work with all plugins. Only use if you know what you need.

  wordpresswordpress-pluginwordpress-developmentphpph7composerphpcsphpcs-wordpressplugindefault-projectconfigurationconfiguration-managementsecuritysecurity-hardeningwordpress-securitywordpress-settingsopinionated-defaults
  Language:PHP 5

• itcssec / wordfence2cloudflare

  This plugin enhances the security of your WordPress website by seamlessly integrating Wordfence and Cloudflare. It automatically synchronizes blocked IPs from Wordfence and adds them to the Cloudflare firewall blocked list, providing an additional layer of protection against malicious traffic.

  cloudflaresecuritywordfencewordpress-securityabuseipdbwaf
  Language:PHP 5

• Jazz-Man / wp-performance

  The main task of this plugin is to increase the security of the site and improve the performance of the site by disabling completely unnecessary hooks and also optimizing SQL queries

  wordpresswordpress-mupluginwordpress-performancewordpress-security
  Language:PHP 5

• niksmac / wpevalfix

  This script will remove the malicious eval() code in Wordpress installation.

  wordpressphpwordpress-security
  Language:PHP 5

• KodoPengin / Collection-of-IP-addresses

  Addresses from which various server attacks and spyware originate

  webserver-securitywordpress-securityip-tablefirewallipv4spywaregame-analyticsprivacy-protectionspiele-analyticsdatenschutz
  4

• mehulkaklotar / wp-nonce

  WordPress Nonce Implementation Object Oriented Way

  wordpresswordpress-noncewordpress-securityoop
  Language:PHP 4

• NavyTitanium / WordPress-Anomaly-Detector

  Compare the files and folders of the original source code of WordPress against a website

  wordpress-sitewordpress-securitywordpress-website-scannerwordpress-scanwordpress-scanner
  Language:PHP 4

• nnamdei / wordpresshack

  Need a security hardened wordpress installation without plugins? Head to your functions.php file in your theme or create one if it does not exist or download this repo and rename it according.

  wordpresswordpress-themewordpress-securitywordpress-setup
  Language:PHP 4

• OnePlc / WP_PLC_Swissknife

  A simple and lightweight plugin to enhance performance, stability and security of wordpress

  wordpresswordpress-securitywordpress-pluginwordpress-xmlrpcwordpress-commentswordpress-rest-apicookie-law
  Language:PHP 4

• joho1968 / cloudbridge-mattermost

  Provides Mattermost 5/6/7 integration for WordPress 5/6.

  wordpresswordpress-pluginwordpress-developmentphpphp72mattermostmattermost-botphp74wordpress5wordpress56wordpress-securitywordpress-hardeningwordpress57wordpress58wordpress59wordpress60oauth2
  Language:PHP 3

• qurbat / CVE-2022-0236

  Proof of concept for unauthenticated sensitive data disclosure affecting the wp-import-export WordPress plugin (CVE-2022-0236)

  wordpress-security
  Language:Python 3