Limit Login Attempts Reloaded的作者是WPChef，目前有1+ 百万个有效安装。已经Tested with 5.4.1版本的wordpress。
Limit the number of login attempts that possible through the normal login as well as XMLRPC, Woocommerce and custom login pages.
WordPress by default allows unlimited login attempts. This allows passwords to be cracked via brute-force relatively easily.
Limit Login Attempts Reloaded blocks an Internet address from making further attempts after a specified limit on retries has been reached, making a brute-force attack difficult or impossible.
Limit the number of retry attempts when logging in (per each IP). This is fully customizable.
Informs the user about the remaining retries or lockout time on the login page.
Optional logging and optional email notification.
It is possible to whitelist/blacklist IPs and Usernames.
Sucuri Website Firewall compatibility.
XMLRPC gateway protection.
Multi-site compatibility with extra MU settings.
GDPR compliant. With this feature turned on, all logged IPs get obfuscated (md5-hashed).
Custom IP origins support (Cloudflare, Sucuri, etc.)
从旧的LIMIT LOGIN ATTEMPTS插件升级
Go to the Plugins section in your site’s backend.
Remove the Limit Login Attempts plugin.
Install the Limit Login Attempts Reloaded plugin.
All your settings will be kept in tact!
Many languages are currently supported in Limit Login Attempts Reloaded plugin but we welcome any additional ones.
Help us bring Limit Login Attempts Reloaded to even more cultures.
Plugin uses standard actions and filters only.
Based on the original code from Limit Login Attemps plugin by Johan Eenfeldt.