One plugin-free layer of protection you could implement is to route your traffic through a site like CloudFlare that has built in brute force protection. The free version is a great layer of protection with paid tiers if you need the added features. I have used this for several of my sites.
I am with you in that I try to use as few plugins as necessary.
*note: felt this would have been better as a comment but did not have the necessary reputation.*
Related Posts:
- How to properly secure my WordPress installation?
- How Restrict access to admin dashboard by specific static ip?
- How to delete Passwrd Protected posts cookies when a user logged out from the site
- Why can’t I access my Intranet LDAPS with NADI?
- Custom wordpress Theme and Plugin repository
- Specific way to allow WordPress users to view their current password? And edit it?
- Custom API plugin to execute 3rd party API to retrieve data
- 404 errors when updating options in admin dashboard
- Manual Backup – How to save to Firefox or Chrome (instead of IE which brings up popup I can’t get rid of)
- My WP site and password was hacked, what to do? [closed]
- How to delete Password Protected posts cookies when a user logged out from the site
- How would I go about creating a user ranked post popularity page?
- Does WordPress validate inputs to all functions? (such as get_user_meta and insert_user_meta)
- Anonymous Postings
- Upgraded to latest version – 3.0.3 and Now I get a “sufficient permissions to access this page” error
- Do widget options need to be escaped widget()?
- Is there any W3C compatible Share & Follow plugin?
- Does any one have Idea to get these functionalities with the plugin wp-multi-network
- Headers Content-Security-Policy CSP Major Issue
- How to block plugin activations with no known user or coming from unknown IP address range?
- Nonce failing on form submission
- Disable woocommerce cookies and delete cart data automatically
- Check for security updates
- className not populating in custom block
- How to fetch products with the price in a page on woocommerce using a form or live search with php
- Run plugins only on certain pages
- Overide plugin files from child theme (/inc/ ) folder
- Standard Fail2Ban vs. WP Fail2ban vs. WP Fail2Ban Redux
- wp_generate_attachment_metadata is creating an empty array
- custom payment gateway in woocommerce failed to connect to remote api server
- Display encrypted content on my website
- Post category with counts been display like a menu
- Post custom Data value in The Events Calendar plugin [closed]
- Trying to create a private area custom for each user where they upload images to a server [closed]
- Send reply with pre-prepared answers
- Best way to maintain and update 3rd-party WP plugin when developer is unresponsive?
- Save custom attributes of product in woocommerce
- Calling an attribute from a plugin shortcode
- Best place for short bio,image and button [closed]
- Use of Templates in a Plugin
- External Domain on WordPress Multisite
- In the archive widget, how do I sort in between two years?
- Customization API for plugin development
- Malicious File Upload [closed]
- Fromcraft Plugin On click submit button [closed]
- Reoccurring 404 Errors on all subpages
- creating a custom shop page display on archive woocommerce
- Setup page on first login on multisite
- polylang + category/tag custom language link
- Anspress Customization: How to show logged in user votes on a single answer?
- Automatic Updates Individual Plugins Not Working
- How do I make a child theme I made POST through a 3rd party plugin?
- Stop Plugin Enumeration [closed]
- How create Group Blogs based on user created Groups
- automatic plugin install availability: server configuration
- How to redirect users to their profile after they successfully edit their profile
- Custom table naming/access convention for multisite: $table_prefix vs base_prefix or other?
- Add ALT attribute to Pin It Button image to pass HTML5 validation
- date/time-picker and file upload (image) fields for custom fields (e.g. with more fields)
- Malware installation during plugin update?
- Getting Theme element into plugins page editor in wp admin
- WordPress as web application base
- Customize The Events Calendar to Include an Option to Expand for More Events Listings
- URL rewrite of independent plugin?
- Plugin for users to create their own ads like Google Adsence
- GeoMashup plugin: how to customize cluster markers / icons? [closed]
- How do I apply style to each category of a list?
- Add category selection to custom post type (plugin)
- Hack-Proof OR Security in WordPress — is it real?
- Redirect to another page using contact form 7? [closed]
- changing posts layout in ultimate member profile plugin
- “No Add Button” for me to customize my WordPress with themes and pluggins
- I should enable automatic updates?
- Translation plugin to translate another plugins
- Can some vulnerabilities in plugins be exploited even when the plugin is inactive?
- Login Customizer doesn’t change the background of the register form
- Inserting custom PHP script on homepage
- Creating Featured Content Boxes
- Security and Must Use Plugins
- Basic password protection without using users and roles
- Integrating WP E-commerce plugin into custom theme
- Is Timthumb still broken? What security measures should be taken?
- What is a reasonable memory limit for WordPress
- Best practice for including plugin output in a template without using shortcode?
- Custom post types – remove default post supports through empty array?
- Basic gallery plugin suggestion [closed]
- Prevent direct access to WordPress plugin assets?
- Completely disabling password reset/recovery
- a weird attribute on every html tag
- How can I run a custom shortcode function on a live site and only run if the viewer is a specific machine?
- Is it safe to use admin-ajax.php in the frontend?
- How to protect WordPress from security scanner [closed]
- Contact Form 7 – Form name blank [closed]
- How do i get file_get_contents to work in wordpress
- Custom widget doesn’t save values from dropdown box
- Plugin Development – Functions or Hooks?
- Plugin function inside custom plugin
- WordPress as template engine
- Change the style of h1, h2, only in post entry
- Too many login attempts