WordPress is based on PHP and database for providing such useful and effective blogging platform, but with this functionality comes the danger of hacking. WordPress due to the database driven architecture has always been the target for Hackers. Hackers most employ SQL Injection attack against vulnerable database application to gain administrative credentials. There are many techniques that you can use to secure your Blog like regular backup, secure login, comment moderation etc. But apart from this you need some extra security measures to ensure that your blog remain safe. Here in this post I am presenting list of some of the top wordpress plugins that will help you in the protection of your blog from attackers. Most of the malicious scripts are present in the free premium wordpress themes that bloggers download from various forums or blogs. Some of the premium themes which are downloaded free contain the backdoor or trapdoor entry to your blog giving full access to the attacker. Try to always use free theme or buy premium themes from authentic source.

Top WordPress Security Plugins List

1 WordPress Antivirus

WordPress Antivirus is a very useful plugin to protect your blog from exploits, malware, spam injections and hacking attempts. Now template scanning functionality has also been added in this tool. Using this tool is very simple you just have to install and if there is any virus detected then it will alert in the admin bar. It also check database tables so if there is any sql injection attack vulnerability you will know and allows you to make necessary changes before your blog gets hacked. Some of the features of WordPress Antivirus are as follows:

Features

• Virus alert in the admin bar
• Cleaning up after plugin removal
• Translations into many languages??
• Daily scan with email notifications
• Database tables and theme templates checks
• WordPress 3.x ready: both visually and technically
• Whitelist solution: Mark suspected cases as “no virus”
• Manual check of template files with alerts on suspected cases

Source

2 WordPress Security Scan

WordPress Security Scan lets you know about the vulnerabilities present in your blog and suggest corrective measures also. It notifies about the vulnerabilities present in passwords, file permission, database security, version hiding, wordpress admin protection etc. You can check the password strength using this tool, so that your admin password is the strongest and toughest to get hacked.

Source

3 Exploit Scanner

 It is a very useful plugin which lets you search and scan various files on your blog including tables of posts and comments and entire database also. If there is any malicious activity found during the scan then this plugin will notify you and lets you take appropriate action. This plugin is for the experts as it does not remove anything indeed it is left to the user to do. So if you think you are an expert of wordpress then use this plugin.

Source

4 TAC

Theme Authenticity Checker (TAC) is a plugin which lets you check the authenticity of your Blog template. TAC searches the source files of every installed theme for signs of malicious code. If such code is found, TAC displays the path to the theme file, the line number, and a small snippet of the suspect code. It is very useful tool to check for the malicious scripts present in the theme. You this and if there is anything you found remove the theme completely and install fresh and authentic theme.

Source

5 WP Malwatch

WP-MalWatch is a WordPress security plugin which performs a nightly scan of your WordPress blog looking for evidence of malware. It is very useful plugin as it allows to scan the wordpress themes and other files for malware.

Source 

6 Better WP Security

Better WP Security is one of the most complete WordPress Security plugin that you can come across. It allows protection, detection and recovery from attack from single plugin. If you want complete security for your blog then this is the plugin that you should install on your blog. It can check database files, hidden files, templates files and other files also for vulnerability and malicious codes present.

Source

7 WordPress Firewall 2

WordPress Firewall 2 is very useful and must plugin. It works in the same way as any other firewall works on any other system. It can identify and stop the know attacks and it has very simple GUI which is easily configurable according to your needs. This plugin supports white-list and blacklist tables which can be used to allow or block request.

Source

8 BBQ: Block Bad Queries

Block Bad Queries (BBQ) is a plugin which runs a simple script that protects your website against malicious URL requests. This plugin check incoming traffic and blacks bad request which can results in attacks such as Buffer Overflow Attack, Cross Site Scripting Attack, SQL Injection Attack, iFrame injection attack and other attack also.

Source

 9 Wordfence Security

Wordfence Security is a free enterprise class security plugin that includes a firewall, anti-virus scanning, malicious URL scanning and live traffic including crawlers. Wordfence is the only WordPress security plugin that can verify and repair your core, theme and plugin files, even if you don’t have backups.

Source

10 Sucuri WordPress Security Plugin

Sucuri WordPress Security plugin lets you take preventive action to protect your WordPress Blog. This plugin apart from scanning of files for malicious activity can also indicate administrator of the blog about any intrusion attempt made on the Blog. Features of the plugin are as follows:

• A Web Application Firewall
• Integrity Monitoring
• Audit Logging and Activity Reporting
• 1-click Hardening
• Server Side Scanning

Source