Skip to content
PluginCanary

HTTP Auth

by Sami Ahmed Siddiqui · 6,000+ active installs · Checked 3 Nov 2026
Watch2 Warnings

Watch: tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.

71/ 100 Canary Score
Sub-scores for HTTP Auth
Ownership100
Maintenance20
Security100
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 15 months (last release 22 Jul 2025). Plan a replacement if the plugin is important to your site.22 Jul 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
sasiddiqui18 Feb 2016 to 22 Jul 2025, 33 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
16 months ago
Releases, 24 months
1
Tested up to
6.8 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter for HTTP Auth
Q1 20240
Q2 20240
Q3 20240
Q4 20241
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 22 Jul 2025. Tested up to 6.8, 3 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
26 Jul 2023HTTP Auth <= 0.3.2 - Cross-Site Request Forgery5.4<= 0.3.21.0.03

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.2 from 6 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star4
4 star1
3 star0
2 star0
1 star1

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for HTTP Auth
4 May 2026808
11 May 2026608
18 May 2026431
25 May 2026247
1 Jun 2026222
8 Jun 2026433
15 Jun 2026438
22 Jun 2026409
29 Jun 2026502
6 Jul 2026289
13 Jul 2026494
20 Jul 2026840
27 Jul 2026755
3 Aug 2026472
10 Aug 2026915
17 Aug 2026556
24 Aug 2026628
31 Aug 2026622
7 Sep 2026804
14 Sep 2026889
21 Sep 20261,020
28 Sep 2026942
5 Oct 20261,103
12 Oct 2026632
19 Oct 20261,113
26 Oct 2026897
2 Nov 2026144

Weekly downloads over the last 4 weeks are 9% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version1.0.1
AuthorSami Ahmed Siddiqui
Added18 Feb 2016
Last updated22 Jul 2025
Active installs6,000+
Requires WordPress3.5
Tested up to6.8.12
Requires PHP5.6
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagshttp auth, Brute Force, brute attack, prevent-crawl, restrict site

Other plugins by this author: Custom Permalinks, Prevent XSS Vulnerability, Make Paths Relative, SCHEMA for Article, Remove Links and Scripts, Media Post Permalink

Questions

Is HTTP Auth still maintained?

HTTP Auth was last updated on 22 Jul 2025. Its Canary status is Watch.

Is HTTP Auth safe?

HTTP Auth has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns HTTP Auth?

The wordpress.org author is Sami Ahmed Siddiqui. Recent committers: sasiddiqui, aliya yasir, plugin-master. We have recorded no ownership change.

What can I use instead of HTTP Auth?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue