Hide My WP is the number one security plugin for WordPress – and works on new and old versions of PHP and WordPress. It hides your WordPress server from attackers, spammers and theme detectors. We have more than 30,500 satisfied customers using Hide My WP. It will also hide your wp login URL and renames the admin URL. It detects and blocks XSS, SQL Injection type of security attacks on your WordPress website, and our new whitelist capability can be used to only allow certain IP’s to manage WordPress.
https://codecanyon.net/item/hide-my-wp-amazing-security-plugin-for-wordpress/4177158
TO MAC USERS: If RAR password doesn't work, use this archive program:
RAR Expander 0.8.5 Beta 4 and extract password protected files without error.
TO WIN USERS: If RAR password doesn't work, use this archive program:
Latest Winrar and extract password protected files without error.