Attributes WP

Attributes User Access is a lightweight and flexible authentication solution for WordPress. It empowers site administrators with detailed control over login processes, enhancing user authentication and access experience with a focus on security and performance.
<h4>Core Features</h4>
Custom Login Page Creation
<ul>
<li>Generate fully integrated login pages with WordPress</li>
<li>Use shortcode-based forms for easy theme compatibility</li>
<li>Automatically adapts to WordPress core updates</li>
<li>Template override system for complete customization</li>
</ul>
Flexible Login Redirection
<ul>
<li>Redirect native WordPress login requests</li>
<li>Define role-based and context-aware redirection rules</li>
<li>Custom redirect URLs per user role</li>
</ul>
Developer-Focused Architecture
<ul>
<li>PSR-4 autoloading and object-oriented design</li>
<li>Extensible with action and filter hooks</li>
<li>Modular components for easy customization</li>
<li>Comprehensive API for extensions</li>
</ul>
Security & Performance
<ul>
<li>WordPress.org compliant security practices</li>
<li>Nonce verification on all forms and AJAX requests</li>
<li>Transient-based error handling (no PHP sessions)</li>
<li>Optimized asset loading</li>
<li>Minified CSS and JavaScript for production</li>
</ul>
<h4>Shortcode Usage</h4>
Basic login form: 
 [attributes_login_form]
With parameters: 
 [attributes_login_form redirect=”/dashboard” remember=”false”]
Available parameters:
<ul>
<li><code>redirect</code> – Target URL after login (default: Dashboard)</li>
<li><code>remember</code> – Show “Remember Me” checkbox (default: true)</li>
<li><code>form_id</code> – Custom form identifier (default: attributes_login_form)</li>
<li><code>label_username</code> – Custom username field label</li>
<li><code>label_password</code> – Custom password field label</li>
<li><code>label_remember</code> – Custom remember me label</li>
<li><code>label_log_in</code> – Custom login button text</li>
</ul>
<h4>Template System</h4>
<h4>Template System</h4>
Override templates in your theme for complete customization.
Template location in theme: 
 your-theme/attributes/front/forms/login-form.php
Original template location: 
 wp-content/plugins/attributes-user-access/templates/front/forms/login-form.php
Copy the original template to your theme and customize as needed. The plugin automatically uses your theme’s template when available.
<h4>Developer Hooks</h4>
Actions:
<ul>
<li><code>attrua_before_login_form</code> – Fires before rendering the login form wrapper</li>
<li><code>attrua_after_login_form</code> – Fires after rendering the login form</li>
<li><code>attrua_login_form_fields</code> – Hook for adding custom fields to login form</li>
<li><code>attrua_login_failed</code> – Fires when a login attempt fails</li>
<li><code>attrua_successful_login</code> – Fires after successful authentication</li>
<li><code>attrua_before_page_creation</code> – Fires before creating authentication pages</li>
<li><code>attrua_after_page_creation</code> – Fires after creating authentication pages</li>
</ul>
Filters:
<ul>
<li><code>attrua_login_redirect_url</code> – Customize login redirection</li>
<li><code>attrua_login_error_message</code> – Modify login error messages</li>
<li><code>attrua_login_credentials</code> – Filter login credentials before authentication</li>
<li><code>attrua_action_links</code> – Modify plugin action links</li>
<li><code>attrua_row_meta</code> – Modify plugin row meta links</li>
</ul>
<h3>Privacy Policy</h3>
Attributes User Access does not:
<ul>
<li>Collect any user data</li>
<li>Send data to external servers</li>
<li>Use cookies for tracking</li>
<li>Store sensitive information</li>
</ul>
The plugin only stores:
<ul>
<li>Plugin settings in WordPress options table</li>
<li>Temporary error messages in WordPress transients (auto-expire)</li>
<li>Page IDs for custom authentication pages</li>
</ul>
All data is stored locally in your WordPress database and is completely removed upon plugin uninstallation.
<h3>Support & Contributing</h3>
Documentation: <a href="https://attributeswp.com/docs" rel="nofollow ugc">https://attributeswp.com/docs</a> 
Support Forum: <a href="https://wordpress.org/support/plugin/attributes-user-access" rel="ugc">https://wordpress.org/support/plugin/attributes-user-access</a> 
GitHub Repository: <a href="https://github.com/attributeswp/attributes-user-access" rel="nofollow ugc">https://github.com/attributeswp/attributes-user-access</a> 
Report Issues: <a href="https://github.com/attributeswp/attributes-user-access/issues" rel="nofollow ugc">https://github.com/attributeswp/attributes-user-access/issues</a>
Contributions are welcome! Please feel free to submit pull requests or open issues on GitHub.

Attributes User Access

Lightweight WordPress authentication with custom login pages, role-based redirections, and secure user access control.

AAM Plugin

Advanced Access Manager (AAM) introduces Access Governance for WordPress – a systematic approach to securing your site by controlling who can access what, when, and why.
Most WordPress security plugins focus on external threats like malware, firewalls, and brute-force attacks. AAM addresses the root cause of the #1 WordPress security risk: broken access controls, excessive privileges, and misconfigured roles.
Instead of reacting to attacks, AAM helps you design security into your WordPress site.
<h4>What Access Governance means in practice</h4>
<ul>
<li>Mitigate Broken Access Controls. Ensure roles, users, and permissions are correctly configured to prevent unauthorized actions and privilege escalation.</li>
<li>Eliminate Excessive Privileges. Identify overpowered users and reduce access to critical functionality, admin areas, and APIs.</li>
<li>Secure Content by Design. Control who can view, edit, publish, or delete posts, pages, media, taxonomies, and custom content types.</li>
<li>Govern Access with Policy. Define access rules using JSON Access Policies — portable, auditable, and automation-friendly.</li>
<li>Build Custom Security Logic. Use the AAM PHP Framework to create advanced, programmatic access controls tailored to your application.</li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Security Audit. Detect risky role assignments, misconfigurations, and compromised accounts.</li>
<li>Granular Access Control. Manage permissions for any user, role, or visitor with precision.</li>
<li>Role & Capability Management. Customize WordPress roles and capabilities beyond defaults.</li>
<li>Admin & Menu Control. Restrict dashboard areas and tailor the admin experience per user or role.</li>
<li>API & Endpoint Protection. Secure REST and XML-RPC access with fine-grained controls.</li>
<li>Modern Authentication Options. Support passwordless and secure login flows.</li>
<li>Developer-Ready Framework. Extend WordPress security using AAM’s powerful SDK.</li>
<li>Ad-Free & Transparent. – No ads, no tracking, no bloat.</li>
</ul>
<h4>Built for Security-Conscious WordPress Users</h4>
AAM is trusted by 150,000+ websites to deliver enterprise-grade access control without unnecessary complexity. Whether you’re a site owner, agency, developer, or security professional, AAM gives you full control over WordPress access — by design.
Most core features are free. Advanced capabilities are available via premium add-ons.
No hidden tracking. No data collection. No unwanted changes. 
Just security you can reason about, audit, and trust.

Advanced Access Manager – Access Governance for WordPress

This plugin made it so easy to create accounts for coworkers who only need to do one or two tasks on a website and it's so easy to do. :) 

I love this plugin!

Use at your own risk as the plugin author @vasyltech never replies to support messages on here.

No support

Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges.

Attributes User Access vs Advanced Access Manager – Access Governance for WordPress