Top Brute Force WordPress Plugins
15 indexed plugins
Plugins
15
Active Installs
1m+
Average Score
63
Audited
15
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Stop XML-RPC Attacks | 100 | 1 | 6k+ | Non-prefixed class | |||
| #2 | Block wp-login | 100 | 3 | 600 | trademarked term | |||
| #3 | User Login History | 99 | 2 | 0 | 10k+ | Plugin Directory Write | ||
| #4 | BotBlocker Security – Complete security platform | 99 | 7 | 3k+ | Non-prefixed constant | |||
| #5 | HTTP Auth | 97 | 9 | 3 | 6k+ | wp function not compatible with requires wp | ||
| #6 | WP Ghost (Hide My WP Ghost) – Security & Firewall | 85 | 6 | 422 | 100k+ | Non-prefixed global variable | ||
| #7 | XO Security | 85 | 1 | 8 | 30k+ | Input is not sanitized | ||
| #8 | Protection Against DDoS | 68 | 22 | 5 | 3k+ | Output is not escaped | ||
| #9 | Security-Protection | 51 | 5 | 32 | 400 | Missing nonce verification | ||
| #10 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | Dynamic hook name | ||
| #11 | Melapress Login Security | 31 | 69 | 278 | 2k+ | Non-prefixed global variable | ||
| #12 | CloudSecure WP Security | 29 | 74 | 334 | 100k+ | Request data is not unslashed | ||
| #13 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | Unsafe printing function | ||
| #14 | Anti-Malware Security and Brute-Force Firewall | 23 | 543 | 965 | 100k+ | Output is not escaped | ||
| #15 | IP Geo Block | 23 | 399 | 589 | 8k+ | Output is not escaped |
