trilobita

Editor Remit gives administrators fine-grained control over which categories editors and authors can work in. Assign permitted categories to a user and they will only see and edit content within those categories — nothing else.
Who is it for?
Organisations and agencies managing WordPress sites with multiple contributors across distinct content areas. Common examples:
<ul>
<li>A university with departments each managing their own news and pages</li>
<li>A company where different teams own different sections of the site</li>
<li>An agency managing a client site with multiple editors who should not have access to each other’s content</li>
</ul>
How it works
Once a user has permitted categories assigned, Remit:
<ul>
<li>Filters the post and page list screens to show only content in their permitted categories</li>
<li>Restricts the category selector in the block editor to their permitted categories only</li>
<li>Blocks any attempt to save content outside their permitted categories — enforced server-side, not just in the UI</li>
<li>Allows access to uncategorised content (posts or pages with no categories assigned) so nothing is inadvertently locked away</li>
</ul>
Restrictions apply to users with the Editor or Author role only. Administrators are always unrestricted.
If a user has no categories assigned, no restriction is applied — they behave as normal.
Page support
By default WordPress does not enable categories for pages. Editor Remit includes an optional setting to add category support to pages and apply the same restrictions there too. Enable it under Settings > Editor Remit.
Block editor (Gutenberg) support
Remit works fully with the block editor. The category panel is filtered in real time to show only permitted categories. Saves are validated server-side via the REST API.
Lean and focused
Remit does one thing well. It does not touch custom post types, custom taxonomies, tags, or any other content type. There are no complex role matrices, capability editors, or access control lists to configure.
Current limitations
Remit restricts posts and optionally pages only. Custom post types, custom taxonomies, and multisite installations are not currently supported.

Trilobita Editor Remit

Restrict editors and authors to specific categories for posts, and optionally pages. Simple, focused, no bloat.

WPFastSec

HT Security is a complete security suite for WordPress, offering multiple layers of protection for your website.
Important – External Service: 
This plugin queries the National Vulnerability Database (NVD) API to check for known CVE vulnerabilities. Requests are made to: 
* API URL: https://services.nvd.nist.gov/rest/json/cves/2.0 
* Terms of Use: https://nvd.nist.gov/general/legal-disclaimer 
* Privacy Policy: https://www.nist.gov/privacy-policy 
* Frequency: Automatic check every 12 hours or manual on-demand 
* Data sent: Name and version of WordPress/installed plugins (no personal data is sent)
The NVD API query is essential for the plugin’s CVE vulnerability detection functionality.
<h4>Key Features</h4>
<ul>
<li>Security Headers – HSTS, X-Frame-Options, Content-Security-Policy, and more</li>
<li>Login Alerts – Email notifications for successful and failed login attempts with rate limiting</li>
<li>Core Integrity Check – Verify WordPress core files against official checksums with 24h cache</li>
<li>CVE Vulnerability Detection – Check WordPress Core and active plugins against NVD database</li>
<li>User Enumeration Protection – Block user enumeration via REST API and author parameters</li>
<li>Maintenance Mode – Maintenance mode with authorized IP whitelist (IPv4, IPv6, CIDR support)</li>
<li>File Permissions Audit – Audit and automatic correction of critical file permissions</li>
<li>Plugin Security Indicators – Visual badges on plugins page showing vulnerability status</li>
</ul>
<h4>CVE Detection Features</h4>
<ul>
<li>Integration with NVD (National Vulnerability Database) API 2.0</li>
<li>Check WordPress Core and active plugins for known vulnerabilities</li>
<li>Intelligent batch processing with rate limiting</li>
<li>8 layers of anti-false-positive validation</li>
<li>Vulnerability badges on plugins page (enable/disable option)</li>
<li>Dismissible alerts per user</li>
<li>Email notification when vulnerabilities are detected</li>
<li>Automatic check every 12 hours</li>
<li>NVD API Key support (increased rate limit)</li>
</ul>
<h4>Security Improvements in v1.5.0</h4>
<ul>
<li>IP Spoofing Fix – Properly detects real IP behind Cloudflare, proxies, and load balancers</li>
<li>Capability Check Fix – Authorization verified before processing</li>
<li>Rate Limiting by IP – More granular rate limiting for login alerts</li>
<li>Input Validation – Maximum length validation for feedback form</li>
</ul>
<h3>Supported Languages</h3>
<ul>
<li>English (US) – 100%</li>
<li>English (UK) – 100%</li>
<li>Português do Brasil – 100%</li>
<li>Português de Portugal – 100%</li>
<li>Español – 100%</li>
</ul>
<h3>License</h3>
This plugin is licensed under the GNU General Public License v2.0 or later. For more information, visit https://www.gnu.org/licenses/gpl-2.0.html.

HT Security


A quality security plugin! I recommend it


Perfect Plugin Security

Complete Security Suite: Security Headers, CVE Detection, Core Integrity Check, Login Alerts, and Maintenance Mode.

Trilobita Editor Remit vs HT Security