Skip to content
PluginCanary

Limit Login Attempts

by Automattic · 300,000+ active installs · Checked 3 Nov 2026
At risk1 Critical1 Warning

At risk: no release in 43 months (last release 4 Apr 2023).

59/ 100 Canary Score

Capped at 59 while a Critical signal is open.

Sub-scores for Limit Login Attempts
Ownership100
Maintenance0
Security100
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalMNT-1No release in 43 months (last release 4 Apr 2023). Plan a replacement if the plugin is important to your site.3 Apr 2024Evidence
  • WarningMNT-2Tested up to WordPress 6.2.15, 9 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
miguelxavierpenha4 Apr 2023 to 4 Apr 2023, 1 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
4 years ago
Releases, 24 months
0
Tested up to
6.2 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for Limit Login Attempts
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 4 Apr 2023. Tested up to 6.2, 9 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
10 Apr 2023Limit Login Attempts <= 1.7.1 - Authenticated(Subscriber+) Stored Cross-Site Scripting6.4<= 1.7.11.7.20
6 Apr 2023Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.7.11.7.20
1 Jun 2012Limit Login Attempts <= 1.7.0 - Brute Force Bypass9.8<= 1.7.01.7.11

Source: Wordfence Intelligence.

Reputation

Average rating stayed at 5.0 between Q4 2023 and Q1 2025.

Rating distribution
5 star170
4 star13
3 star3
2 star4
1 star12
Latest low reviews

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Limit Login Attempts
4 May 2026434
11 May 2026904
18 May 2026839
25 May 2026741
1 Jun 2026817
8 Jun 2026873
15 Jun 2026772
22 Jun 2026711
29 Jun 2026807
6 Jul 2026818
13 Jul 2026940
20 Jul 2026927
27 Jul 2026980
3 Aug 20261,009
10 Aug 2026938
17 Aug 2026907
24 Aug 20261,058
31 Aug 20261,006
7 Sep 2026912
14 Sep 20261,435
21 Sep 20261,486
28 Sep 20261,170
5 Oct 20261,726
12 Oct 20261,109
19 Oct 20262,559
26 Oct 20262,101
2 Nov 2026344

Weekly downloads over the last 4 weeks are 46% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version1.7.2
AuthorAutomattic
Added15 Jan 2009
Last updated4 Apr 2023
Active installs300,000+
Requires WordPress2.8
Tested up to6.2.15
Requires PHPnot stated
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagslogin, security, authentication

Other plugins by this author: WooCommerce, Akismet Anti-spam: Spam Protection, Jetpack - AI Agents & MCP, Security, Backup & Analytics, WP Super Cache, WooCommerce Legacy REST API, Layout Grid Block, Jetpack Boost - Website Speed, Performance and Critical CSS, Crowdsignal Forms, Crowdsignal Dashboard - Polls, Surveys & more, Page Optimize, Jetpack Protect, Gravatar Enhanced - Avatars, Profiles, and Privacy

Questions

Is Limit Login Attempts still maintained?

Limit Login Attempts was last updated on 4 Apr 2023. Its Canary status is At risk.

Is Limit Login Attempts safe?

Limit Login Attempts has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is At risk.

Who owns Limit Login Attempts?

The wordpress.org author is Automattic. Recent committers: miguelxavierpenha, johanee, plugin-master. We have recorded no ownership change.

What can I use instead of Limit Login Attempts?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue