Deactivate the plugin via FTP

If wp-admin is unreachable (for example after a firewall lockout), deactivate Security Ninja from the filesystem:

1. Connect with FTP or your host file manager.
2. Open /wp-content/plugins/.
3. Rename (preferred) or delete the plugin folder:
   • security-ninja (free / standard package name), or
   • security-ninja-premium (if that is the folder name on your install)

WordPress will stop loading the plugin. Log in, then reinstall or rename the folder back when ready.

Related recovery: Secret Access URL, How to get back into your website.