MyWebsiteAdvisor

ChrisHurst

Simple Security Plugin for WordPress is an Access Log to track Logins and Failed Login Attempts for the admin area of your WordPress Website
You can add a widget to the admin dashboard for logins and failed login attempts.
<a href="http://mywebsiteadvisor.com/plugins/simple-security/" rel="nofollow ugc">Upgrade to Simple Security Ultra</a> for advanced features including:
<ul>
<li>Configurable email alert notifications when selected conditions are met</li>
<li>Receive an optional email alert when new IP addresses are added to Blacklist</li>
<li>Receive an optional email alert after a failed login attempt</li>
<li>Receive an optional email alert after a successful login</li>
<li>Lifetime Priority Support and Update License</li>
</ul>
Check out the <a href="http://www.youtube.com/watch?v=pMZ5oCUuX7k&hd=1" rel="nofollow ugc">Simple Security Plugin for WordPress Video Tutorial</a>:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/pMZ5oCUuX7k?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&hd=1&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
Developer Website: http://MyWebsiteAdvisor.com/
Plugin Support: http://MyWebsiteAdvisor.com/support/
Plugin Page: http://MyWebsiteAdvisor.com/plugins/simple-security/
Tutorial: http://mywebsiteadvisor.com/learning/video-tutorials/simple-security-tutorial/
Requirements:
<ul>
<li>PHP v5.0+</li>
<li>WordPress v3.3+</li>
</ul>
To-do:

Simple Security

Access Log to track Logins and Failed Login Attempts

WebbPlatsen

joho68

This WordPress plugin provides security functionality and integration with fail2ban.
It does not require fail2ban to function.
Basic security functionality includes:
<ul>
<li>Disabling login with username (require e-mail address)</li>
<li>Allow/Deny login from IP address, hostname (including wildcard support)</li>
<li>Preventing user enumeration (?author=nnn)</li>
<li>Less detailed error messages on login failures</li>
<li>Minimum username length</li>
<li>Blocking specific usernames from being used to register new users</li>
<li>Requiring e-mail address matching for new user registrations</li>
<li>Warning about new user role setting</li>
<li>Blocking of portions or all of WordPress REST API</li>
<li>Disabling of RSS and Atom feeds</li>
<li>Removal of “Generator” information from HTML and feeds</li>
<li>Detection of Cloudflare IP addresses for logging of actual IP addresses</li>
<li>Blocking/Allowing logins from IP addresses, IP ranges, and/or hostnames</li>
<li>Partially or fully disable XMLRPC access</li>
</ul>
The plugin also plays nicely with Fail2ban, which is an advanced way of blocking IP addresses dynamically upon suspicious behavior.
Other notes:
<ul>
<li>This plugin may work with earlier versions of WordPress</li>
<li>This plugin has been tested with WordPress 5.5+ and 6.x at the time of this writing</li>
<li>This plugin has been tested with PHP 7.4, 8.1, 8.2, and 8.3 at the time of this writing</li>
<li>Local syntax/runtime compatibility checks have also been run on PHP 8.4</li>
<li>This plugin optionally makes use of <code>mb_</code> PHP functions</li>
<li>This plugin may create entries in your PHP error log (if active)</li>
<li>This plugin contains no Javascript</li>
<li>This plugin contains no tracking code and does not store any information about users</li>
</ul>
<h3>Credits</h3>
The Fail2WP Plugin was written by Joaquim Homrighausen while converting caffeine into code.
Fail2WP is sponsored by <a href="https://webbplatsen.se" rel="nofollow ugc">WebbPlatsen i Sverige AB</a>, Sweden.
Copyright 2020-2026 Joaquim Homrighausen; all rights reserved.
Commercial support and customizations for this plugin is available from WebbPlatsen i Sverige AB in Sweden.
If you find this plugin useful, the author is happy to receive a donation, good review, or just a kind word.
If there is something you feel to be missing from this plugin, or if you have found a problem with the code or a feature, please do not hesitate to reach out to support@webbplatsen.se.
This plugin can also be downloaded from <a href="https://code.webbplatsen.net/wordpress/fail2wp/" rel="nofollow ugc">code.webbplatsen.net</a> and <a href="https://github.com/joho1968/fail2wp" rel="nofollow ugc">GitHub</a>
More detailed documentation is available at <a href="https://code.webbplatsen.net/documentation/fail2wp/" rel="nofollow ugc">code.webbplatsen.net/documentation/fail2wp/</a>
Kudos to <a href="https://github.com/tholu" rel="nofollow ugc">Thomas Lutz</a>.

Fail2WP

Security plugin for WordPress with support for fail2ban. Tested with WordPress 5.5+ and PHP 7.4-8.4

Simple Security vs Fail2WP