Login by Auth0
At risk: no release in 28 months (last release 12 Jul 2024).
Capped at 59 while a Critical signal is open.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| auth0 | 13 Jun 2014 to 28 Aug 2025, 184 commits |
|---|---|
| evansims | 8 Jul 2024 to 12 Jul 2024, 6 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 2 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.5 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 2 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 12 Jul 2024. Tested up to 6.5, 6 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Jul 2024 | Login by Auth0 <= 4.6.0 - Reflected Cross-Site Scripting via wle | 6.1 | <= 4.6.0 | 4.6.1 | 0 |
| 1 Apr 2020 | Login by Auth0 <= 3.11.3 - Stored Cross-Site Scripting | 7.2 | <= 3.11.3 | 4.0.0 | 0 |
| 1 Apr 2020 | Login by Auth0 <= 3.11.3 - Insecure Direct Object Reference | 4.3 | <= 3.11.3 | 4.0.0 | 0 |
| 1 Apr 2020 | Login by Auth0 <= 3.11.3 - CSV Injection | 9.8 | <= 3.11.3 | 4.0.0 | 0 |
| 1 Apr 2020 | Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery | 8.8 | <= 3.11.3 | 4.0.0 | 0 |
| 31 Mar 2020 | Login by Auth0 Plugin <= 3.11.3 - Stored Cross-Site Scripting | 5.5 | <= 3.11.3 | 4.0.0 | 1 |
| 31 Jan 2020 | Login by Auth0 3.11.0 - 3.11.2 - Cross-Site Scripting | 6.1 | 3.11.0 to 3.11.2 | 3.11.3 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q2 2024 | 1.0 |
|---|---|
| Q3 2024 | 1.0 |
| Q1 2025 | 1.0 |
Average rating stayed at 1.0 between Q2 2024 and Q1 2025.
| 5 star | 8 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 8 |
- Avoid “Login by Auth0” - A Broken, Abandoned Mess! 🚨 · 1 star · 7 Feb 2025
- Broken wizard, poor documentation, and poor support · 1 star · 18 Aug 2024
- Doesn’t work, abandoned · 1 star · 26 Apr 2024
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 138 |
|---|---|
| 11 May 2026 | 305 |
| 18 May 2026 | 386 |
| 25 May 2026 | 352 |
| 1 Jun 2026 | 380 |
| 8 Jun 2026 | 339 |
| 15 Jun 2026 | 327 |
| 22 Jun 2026 | 427 |
| 29 Jun 2026 | 198 |
| 6 Jul 2026 | 394 |
| 13 Jul 2026 | 279 |
| 20 Jul 2026 | 349 |
| 27 Jul 2026 | 438 |
| 3 Aug 2026 | 498 |
| 10 Aug 2026 | 504 |
| 17 Aug 2026 | 672 |
| 24 Aug 2026 | 532 |
| 31 Aug 2026 | 494 |
| 7 Sep 2026 | 596 |
| 14 Sep 2026 | 854 |
| 21 Sep 2026 | 911 |
| 28 Sep 2026 | 703 |
| 5 Oct 2026 | 1,344 |
| 12 Oct 2026 | 808 |
| 19 Oct 2026 | 1,034 |
| 26 Oct 2026 | 935 |
| 2 Nov 2026 | 282 |
Weekly downloads over the last 4 weeks are 43% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 4.6.2 |
|---|---|
| Author | Auth0 |
| Added | 13 Jun 2014 |
| Last updated | 12 Jul 2024 |
| Active installs | 10,000+ |
| Requires WordPress | 6.5.5 |
| Tested up to | 6.5.14 |
| Requires PHP | 7.4 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | social, security, multi-factor, authentication, Single Sign-on |
Questions
Is Login by Auth0 still maintained?
Login by Auth0 was last updated on 12 Jul 2024. Its Canary status is At risk.
Is Login by Auth0 safe?
Login by Auth0 has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is At risk.
Who owns Login by Auth0?
The wordpress.org author is Auth0. Recent committers: auth0, evansims, rrauch, plugin-master. We have recorded no ownership change.
What can I use instead of Login by Auth0?
Plugins in the same category with a higher Canary Score: Login for Google Apps by WPAuth, Log in with Google, UsersWP - Social Login, Nextend Social Login and Register, Wp Social Login and Register Social Counter.