Skip to content
PluginCanary

Limit Login Attempts Security

Limit Login Attempts Security - Brute Force Protection, 2FA, Firewall & Login Security
by WPChef · 1,000,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 35 releases in 24 months, no unpatched vulnerabilities.

84/ 100 Canary Score
Sub-scores for Limit Login Attempts Security
Ownership100
Maintenance100
Security95
Support29
Reputation75

How the score works

Quick answers

Is Limit Login Attempts Security still maintained?
Yes. Last release 2 Nov 2026, 35 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns Limit Login Attempts Security, and has it changed hands?
No change recorded. Main committer wpchefgadget since Aug 2016. 4 Nov 2026 · SVN log
Was Limit Login Attempts Security removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Limit Login Attempts Security safe?
5 known vulnerabilities, all fixed (latest in 3.3.5). Not on the exploited list. 17 Aug 2026 · Wordfence Intelligence
Is the latest Limit Login Attempts Security update safe to install?
No ownership change before 3.4.0. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpchefgadget3 Aug 2016 to 2 Nov 2026, 180 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
2 days ago
Releases, 24 months
35
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Limit Login Attempts Security
Q1 202410
Q2 20243
Q3 20242
Q4 20243
Q1 20252
Q2 20251
Q3 20254
Q4 20254
Q1 20264
Q2 20269
Q3 20268
Q4 20261

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.9 (17 reviews). Lifetime: 4.8.

Average rating per quarter for Limit Login Attempts Security
Q2 20264.2
Q3 20264.5
Q4 20265.0

Average rating rose from 4.2 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star1403
4 star31
3 star8
2 star10
1 star37
Latest low reviews

Security record

1 vulnerability in 24 months (5 on record), patched (latest fixed in 3.3.5).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Aug 2026Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention < 3.3.5 - Unauthenticated Username Denylist Bypass5.3< 3.3.53.3.5Patched before disclosure
20 Dec 2023Limit Login Attempts Reloaded <= 2.25.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 2.25.262.25.271
6 Nov 2023Limit Login Attempts Reloaded <= 2.25.25 - Missing Authorization4.3<= 2.25.252.25.26Patched before disclosure
14 Dec 2020Limit Login Attempts Reloaded <= 2.17.3 - Login Rate Limiting Bypass7.3<= 2.17.32.17.4Patched before disclosure
14 Dec 2020Limit Login Attempts Reloaded <= 2.15.2 - Reflected Cross-Site Scripting6.1<= 2.15.22.17.4Patched before disclosure

Changelog mentions of security fixes: 3.3.7 (CSRF, sanitize); 3.3.8 (security, nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

29% of 7 support threads resolved in the last 2 months.

Momentum

1,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Limit Login Attempts Security
4 May 202630,704
11 May 20261,879,207
18 May 20261,035,721
25 May 2026108,167
1 Jun 202674,526
8 Jun 202658,162
15 Jun 2026959,972
22 Jun 2026975,425
29 Jun 2026118,808
6 Jul 2026962,994
13 Jul 2026131,018
20 Jul 202692,107
27 Jul 202670,648
3 Aug 202662,949
10 Aug 2026947,553
17 Aug 2026126,938
24 Aug 202692,193
31 Aug 20261,722,362
7 Sep 2026916,072
14 Sep 2026989,329
21 Sep 2026958,339
28 Sep 2026121,611
5 Oct 2026105,376
12 Oct 202675,793
19 Oct 202687,654
26 Oct 202679,828
2 Nov 2026469,509

Weekly downloads over the last 4 weeks are 64% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Two Factor AuthenticationScore 100 · 20,000+Login rebuilderScore 100 · 20,000+LWS Hide LoginScore 100 · 20,000+WP Limit Login AttemptsScore 100 · 10,000+Login Security CaptchaScore 100 · 10,000+

Facts

Version3.4.0
AuthorWPChef
Added3 Aug 2016
Last updated2 Nov 2026
Active installs1,000,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHPnot stated
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tags2FA, firewall, security, Brute Force, login security

Other plugins by this author: Protection Against DDoS, Use InnoDB, Disable AI for Security, WPChef, Integrum Security Scanner

Questions

Is Limit Login Attempts Security still maintained?

Yes. Last release 2 Nov 2026, 35 releases in the last 24 months.

Who owns Limit Login Attempts Security, and has it changed hands?

No change recorded. Main committer wpchefgadget since Aug 2016.

Was Limit Login Attempts Security removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Limit Login Attempts Security safe?

5 known vulnerabilities, all fixed (latest in 3.3.5). Not on the exploited list.

Is the latest Limit Login Attempts Security update safe to install?

No ownership change before 3.4.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue