Esteban

Stronger WP. Limit access to critical WordPress areas, even for other admins.
Fuerte-WP is a WordPress Plugin to enforce certain limits for users with administrator access, and to force some other security related tweaks.
Some features included are: 
– Configure your own super users that will not be affected by changes and tweaks enforced by Fuerte-WP. 
– Enable and force auto updates for WordPress core, plugins, themes & translations. 
– Disables XML-RPC API. 
– Disables WordPress theme and plugin editor, for non super users. 
– Disables installation of new themes and/or plugins, for non super users. 
– Restrict editing or deleting super users, for non super users. 
– Restrict access to some pages inside WordPress admin panel, like plugins or theme uploads, for non super users. Restricted pages and areas can be extended vía configuration. 
– Remove (and restrict) items from WordPress menus, for non super users. 
– Disable Plugins installation (via WP’s repo or upload). Also disable plugins deletion.
Check the <a href="https://github.com/TCattd/Fuerte-WP" rel="nofollow ugc">full feature set at here</a>.

Fuerte-WP

Stronger WP. Limit access to critical WordPress areas, even for other admins.

johanee

Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Features
<ul>
<li>Limit the number of retry attempts when logging in (for each IP). Fully customizable</li>
<li>Limit the number of attempts to log in using auth cookies in same way</li>
<li>Informs user about remaining retries or lockout time on login page</li>
<li>Optional logging, optional email notification</li>
<li>Handles server behind reverse proxy</li>
<li>It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂</li>
</ul>
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish
Plugin uses standard actions and filters only.

Limit Login Attempts

bad role

We had initial issues and tried again and it is working better.

Getting a lot better.


I absolutely hate bloated plugins, so I love this one. It's simple and works as expected. Guess it's wise to use a plugin such as this one, against brute force attacks.



Guido


Love this plugin

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Fuerte-WP vs Limit Login Attempts