Is there anyone who has made some kind of overview over WordPress plugins and their GDPR compliance?
No, there is not. You will need to evaluate each plugin on an individual basis for its compliance. .org does not conduct reviews of plugins for compliance with local laws ( and if they did they couldn't be relied on as they aren't legal professionals ).
In this particular URL, everything after the # (hash) is the fragment identifier and is not sent to the server by the browser, so cannot be blocked server-side in .htaccess.
The server only sees:
If the # was to be removed from this ...
To prevent brute force attacks, there are some security measures you need to implement on your site
Prevent the discovery of usernames
Limit login attempts
Change the default login page URL
Implement two-factor authentication
Implement HTTP authentication
Use a firewall
If you use a username and password that’s long and unique, it ...