cubecolour

WordPress 4.5 added the ability to login using the registered user’s email address in place of the username. When this plugin is active, the ability to login using the email address in place of the username is removed, and the label of the input field is changed to reflect this.

No Login by Email Address

Removes the ability to login using the email address instead of the username.

zackdesign

AliasIO

Note: This plugin requires PHP 5
Using WordPress security docs as a guide we have targeted a lot of the issues and endeavoured to make the process of strengthening your WP installation as easy as possible by providing the information you need to be able to set things up.
Features:
<pre><code>* Scan the database for possible XSS issues.
* Limit login attempts to one per ten seconds per user.
* Check all file permissions.
* Check for presence of index.html files in all directories.
* Check if WordPress is up-to-date.
* Remove the version number from HTML source.
* Log all POST requests.
* Log all failed login attempts.
* Change the admin username.
* Randomize the database table prefix.
* Require stronger passwords.
* Detect SSH.
</code></pre>
This plugin was commisioned by <a href="http://www.michaelpenner.com/" title="MJ Penner Consulting" rel="nofollow ugc">MJ Penner Consulting</a> and released to the general public as a gesture of good will.

MJP Security Plugin

MJP Security Tools is a plugin designed to fix a lot of Wordpress security issues, as well as providing extra support.

No Login by Email Address vs MJP Security Plugin