Rick Beckman

Adds to search results and archive pages the total number of posts available as well as an indicator as to which batch of posts are currently being displayed, for example “11-20 of 124.” This plugin is a remix of <a href="https://wordpress.org/extend/plugins/results-count" rel="ugc">Results Count</a> by Matthew Taylor, and it is optimized for <a href="http://get-thesis.com/" rel="nofollow ugc">the Thesis theme framework</a>.
Say you have a category named “Videos” with 432 posts; visiting the third page of that archive would show you posts 21-30 (assuming 10 posts per page); with this plugin, this information would be available to your users at a glance:
<pre><code>21–30 of 432 entries categorized:
<h1>Videos</h1>
</code></pre>
Search results and the following archive types are taken into account by this plugin: day, month, year, author, category, and tag.

Results Count Remix

Adds both the number of displayed posts as well as the total number of returned posts to search and archive pages.

Marc Armengou

Security Hardener is inspired by the official WordPress hardening guide (Advanced Administration / Security / Hardening). It uses the platform’s standard functions and does not override core. Applies a prudent set of defenses:
<ul>
<li>Security headers: <code>X-Frame-Options</code>, <code>X-Content-Type-Options</code>, <code>Referrer-Policy</code>, <code>Permissions-Policy</code>, <code>COOP/CORP</code>. </li>
<li>HSTS (optional; HTTPS only). </li>
<li>Basic nonce-based CSP (optional; requires testing). </li>
<li>Disable XML-RPC and pingbacks (optional; enabled by default). </li>
<li>Hide the WordPress version in the <code><head></code>. </li>
<li>Block user enumeration via <code>/?author=</code> by returning 404. </li>
<li>Generic login errors (prevents information leakage). </li>
<li>IP-based login rate limiting with transients (configurable threshold and window). </li>
<li>Restrict the REST API to authenticated users, with a minimal allowlist for oEmbed/index.</li>
</ul>
<blockquote>
⚠️ Important: The restrict REST API option and CSP can affect integrations and plugins. Test it in staging first.
</blockquote>
Privacy: the plugin does not send data to external services or create new tables. It only uses transients to count failed login attempts.

Security Hardener

Basic hardening: secure headers, enumeration blocking, generic login errors, IP-based rate limiting, and optional restriction of the REST API.

Results Count Remix vs Security Hardener