Disable XML-RPC Pingback
disable-xml-rpc-pingback
Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
Attachment Pages Redirect
attachment-pages-redirect
Redirect attachment pages or return a 404 error for them based on the parent post status.
Easy Add Thumbnail
easy-add-thumbnail
Automatically sets the featured image to the first image uploaded into the post (any post type with thumbnail support). So easy like that...
Fresh Forms for Gravity
fresh-forms-for-gravity
Prevent supported caching and JS optimization plugins breaking Gravity Forms.
Clean Filenames
sanitize-spanish-filenames
Removes or replace international or special characters that can make your filenames not compliant with some servers or services.
SAR Friendly SMTP
sar-friendly-smtp
A friendly SMTP plugin for WordPress. No third-party, simply using WordPress native possibilities.
GF No Duplicates
gf-no-duplicates
Prevents duplicate Gravity Forms submissions caused by the same POST request sent more than once.
Jetpack Lite
jetpack-lite
Prevents Jetpack from loading any modules except for Stats and WP.me Shortlinks modules. Jetpack is required!
Safe Paste
safe-paste
Removes a lot of HTML tags from post and page content before inserting it to database. Preventing users to paste undesired HTML tags to content.
Disable REST API for Real
sar-disable-rest-api
Really prevents the REST API from handling requests (default) or require user to be logged in.
SAR One Click Security
sar-one-click-security
Adds some extra security to your WordPress with only one click.
TEDTalks Embedder
tedtalks-embedder
Helps you to embed TED Talks videos on your self hosted WordPress by simply pasting the URL or using a shortcode.
Cookieless Comments
cookieless-comments
Disables WordPress comment cookies to simplify EU cookie law compliance requirements.
Shorten2Ping
shorten2ping
Sends status updates to Ping.fm everytime you publish a post, using your own domain, bit.ly, wp.me, su.pr, is.gd and others for shortened permalinks.
Check plugin security before you install.
Every plugin gets the full treatment — vulnerabilities, code analysis, real-world exposure, and a transparent score breakdown.