Belki bu işinize yarar hocam;
https://wordpress.org/plugins/prevent-direct-access/