| #1 | miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) | 88 | 611 | 5 | 10k+ | 2026-05-21 | wp function not compatible with requires wp |
| #2 | Two Factor | 42 | 18 | 70 | 100k+ | 2026-03-27 | Recommended |
| #3 | Two Factor Authentication | 35 | 108 | 139 | 20k+ | 2026-03-25 | Output Not Escaped |
| #4 | WP 2FA – Two-factor authentication for WordPress | 30 | 269 | 380 | 100k+ | 2026-05-20 | Exception Not Escaped |
| #5 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | 2026-06-08 | Input Not Sanitized |
| #6 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 621 | 602 | 1m+ | 2026-06-16 | Unsafe Printing Function |
| #7 | Wordfence Login Security | 25 | 248 | 418 | 70k+ | 2026-04-29 | Output Not Escaped |
| #8 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,191 | 788 | 30k+ | 2026-06-08 | Output Not Escaped |
| #9 | Login With Ajax – Fast Logins, 2FA, Redirects | 23 | 623 | 520 | 10k+ | 2026-05-24 | Output Not Escaped |
| #10 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 40k+ | 2026-06-09 | Missing Translators Comment |
| #11 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | 2026-05-13 | Output Not Escaped |
| #12 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | 2026-06-17 | Missing Translators Comment |
