All In One Login
Healthy: maintained, last release 30 Oct 2026, 18 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 100 |
| Reputation | 70 |
Quick answers
- Is All In One Login still maintained?
- Yes. Last release 30 Oct 2026, 18 releases in the last 24 months. 30 Oct 2026 · wordpress.org
- Who owns All In One Login, and has it changed hands?
- No change recorded. Main committer wpexpertsio since Mar 2023. 4 Nov 2026 · SVN log
- Was All In One Login removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is All In One Login safe?
- 4 known vulnerabilities, all fixed (latest in 2.5.0). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
- Is the latest All In One Login update safe to install?
- No ownership change before 2.5.1. No one-star spike after it. 30 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 26 Feb 2019 to 26 Feb 2019, 1 commits |
|---|---|
| nunosarmento | 27 Feb 2019 to 17 Mar 2023, 63 commits |
| wpexpertsio | 19 Mar 2023 to 30 Oct 2026, 107 commits |
3 committers recorded. No ownership change since 2019.
Maintenance
- Last release
- 5 days ago
- Releases, 24 months
- 18
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 6 |
| Q4 2024 | 3 |
| Q1 2025 | 2 |
| Q2 2025 | 2 |
| Q3 2025 | 1 |
| Q4 2025 | 2 |
| Q1 2026 | 1 |
| Q2 2026 | 4 |
| Q3 2026 | 1 |
| Q4 2026 | 2 |
Last release 30 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 3.6.
| Q3 2024 | 2.0 |
|---|---|
| Q4 2024 | 5.0 |
| Q2 2026 | 5.0 |
Average rating rose from 2.0 to 5.0 between Q3 2024 and Q2 2026.
| 5 star | 22 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 11 |
- Once Perfect, Now a Paid Upgrade: A Disappointing Change · 1 star · 7 Sep 2024
- A great plugin has been destroyed · 1 star · 26 Aug 2024
- I just wanted “one function” plugin … · 1 star · 5 Aug 2024
Security record
2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 2.5.0).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Oct 2026 | All In One Login <= 2.4.1 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 2.4.1 | 2.5.0 | Patched before disclosure |
| 9 Oct 2025 | WordPress All In One Login Plugin <= 2.0.8 - IP Sooofing to Protection Mechanism Bypass | 5.3 | 2.0.8 | 2.0.9 | Patched before disclosure |
| 27 Jul 2023 | Change WP Admin Login <= 1.1.3 - Protection Mechanism Failure to Login Page Disclosure | 5.3 | <= 1.1.3 | 1.1.4 | Patched before disclosure |
| 9 May 2022 | Change WP Admin Login <= 1.0.9 - Missing Authorization Checks | 5.4 | <= 1.0.9 | 1.1.0 | Patched before disclosure |
Changelog mentions of security fixes: 2.4.1 (vulnerability); 2.5.0 (security, sanitize).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
100% of 5 support threads resolved in the last 2 months.
Momentum
60,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 2,271 |
|---|---|
| 11 May 2026 | 3,586 |
| 18 May 2026 | 4,459 |
| 25 May 2026 | 3,007 |
| 1 Jun 2026 | 2,543 |
| 8 Jun 2026 | 36,060 |
| 15 Jun 2026 | 7,490 |
| 22 Jun 2026 | 19,261 |
| 29 Jun 2026 | 5,735 |
| 6 Jul 2026 | 5,113 |
| 13 Jul 2026 | 2,778 |
| 20 Jul 2026 | 3,364 |
| 27 Jul 2026 | 2,791 |
| 3 Aug 2026 | 2,258 |
| 10 Aug 2026 | 1,973 |
| 17 Aug 2026 | 22,457 |
| 24 Aug 2026 | 5,774 |
| 31 Aug 2026 | 3,088 |
| 7 Sep 2026 | 2,282 |
| 14 Sep 2026 | 2,227 |
| 21 Sep 2026 | 2,491 |
| 28 Sep 2026 | 2,305 |
| 5 Oct 2026 | 1,778 |
| 12 Oct 2026 | 2,033 |
| 19 Oct 2026 | 2,970 |
| 26 Oct 2026 | 37,350 |
| 2 Nov 2026 | 1,843 |
Weekly downloads over the last 4 weeks are 58% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.5.1 |
|---|---|
| Author | Saad Iqbal |
| Added | 27 Feb 2019 |
| Last updated | 30 Oct 2026 |
| Active installs | 60,000+ |
| Requires WordPress | 6.2 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | User Management & Authentication > Two-Factor Authentication (2FA) |
| Tags | 2FA, login url, recaptcha, custom login, login security |
Other plugins by this author: CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App, Password Protected, Advanced File Manager - Ultimate File Manager for WordPress And Document Library Solution, Social Preview and Open Graph Tags, Gutena Forms - Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder, WC Hide Shipping Methods, New User Approve, Email Templates Customizer and Designer for WordPress and WooCommerce, Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred, License Manager for WooCommerce, Gutena Tabs
Questions
Is All In One Login still maintained?
Yes. Last release 30 Oct 2026, 18 releases in the last 24 months.
Who owns All In One Login, and has it changed hands?
No change recorded. Main committer wpexpertsio since Mar 2023.
Was All In One Login removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is All In One Login safe?
4 known vulnerabilities, all fixed (latest in 2.5.0). Not on the exploited list.
Is the latest All In One Login update safe to install?
No ownership change before 2.5.1. No one-star spike after it.