CubeMage

Login Guard by CubeMage provides a security solution to protect your WordPress login, registration, and comment forms against spam and brute-force attacks.
Instead of relying solely on password verification, this plugin integrates Cloudflare Turnstile to validate visitors before WordPress processes the authentication request. This approach helps reduce server load caused by automated bot attempts.
Key Features:
<ul>
<li>Cloudflare Turnstile Integration: Uses a privacy-focused, GDPR-compliant alternative to CAPTCHA for bot verification.</li>
<li>Pre-Authentication Check: Validates the Turnstile token before the database query occurs, saving server resources.</li>
<li>Limit Login Attempts: Automatically blocks IP addresses after 5 consecutive failed login attempts within 15 minutes to prevent brute-force attacks.</li>
<li>XML-RPC Protection: Disables XML-RPC functionality to close a common attack vector often used for DDoS attacks.</li>
<li>Form Support: Adds protection to the Login form, Registration form, Lost Password form, and Comment section.</li>
<li>Performance: Uses native WordPress Transients for tracking failed attempts, avoiding the creation of heavy custom database tables.</li>
</ul>
Configuration:
The plugin includes a setup interface to easily input your Cloudflare Site Key and Secret Key.

CubeMage Login Guard

Integrates Cloudflare Turnstile, Limits Login Attempts, and Disables XML-RPC to protect WordPress forms.

Kitgenix CAPTCHA for Cloudflare Turnstile vs CubeMage Login Guard