Login Lockdown & Protection
Healthy: vulnerability published 5 Oct 2026, fixed in 2.18.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 70 |
| Reputation | 85 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| mvandemar | 16 Jun 2008 to 2 Jun 2022, 35 commits |
|---|---|
| WebFactory | 22 Sep 2022 to 6 Oct 2026, 61 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 28 days ago
- Releases, 24 months
- 8
- Tested up to
- 7.1 current
- Requires PHP
- 5.2 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 2 |
| Q3 2025 | 1 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 1 |
| Q4 2026 | 2 |
Last release 6 Oct 2026. Tested with WordPress 7.1 (current).
Support
100% of 4 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2026 | Login Lockdown & Protection <= 2.17 - Unauthenticated Login Lockout Protection Bypass | 5.3 | <= 2.17 | 2.18 | 0 |
| 12 Dec 2025 | Login Lockdown & Protection <= 2.14 - IP Block Bypass | 5.3 | <= 2.14 | 2.15 | 0 |
| 6 May 2025 | Login Lockdown & Protection <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelisting | 5.4 | <= 2.11 | 2.12 | 0 |
| 9 Feb 2024 | Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization | 5.4 | <= 2.08 | 2.09 | 0 |
| 21 Dec 2023 | Login Lockdown – Protect Login Form <= 2.06 - Authenticated(Administrator+) SQL Injection | 6.6 | < 2.07 | 2.07 | 0 |
| 21 Nov 2023 | Login Lockdown <= 2.06 - Authenticated (Administrator+) SQL Injection | 7.2 | <= 2.06 | 2.07 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 3.0 |
|---|---|
| Q1 2024 | 4.0 |
| Q2 2025 | 1.0 |
| Q3 2026 | 5.0 |
Average rating rose from 3.0 to 5.0 between Q4 2023 and Q3 2026.
| 5 star | 48 |
|---|---|
| 4 star | 0 |
| 3 star | 4 |
| 2 star | 0 |
| 1 star | 9 |
- 503 Service Unavailable · 1 star · 17 May 2025
- “Unknown” login attempts after installation · 1 star · 20 Jul 2023
- Extortion! Removed Unlock for admins! · 1 star · 16 May 2023
Momentum
100,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,416 |
|---|---|
| 11 May 2026 | 2,653 |
| 18 May 2026 | 3,371 |
| 25 May 2026 | 2,487 |
| 1 Jun 2026 | 2,258 |
| 8 Jun 2026 | 2,093 |
| 15 Jun 2026 | 2,039 |
| 22 Jun 2026 | 1,741 |
| 29 Jun 2026 | 2,137 |
| 6 Jul 2026 | 2,020 |
| 13 Jul 2026 | 1,884 |
| 20 Jul 2026 | 25,512 |
| 27 Jul 2026 | 6,652 |
| 3 Aug 2026 | 5,758 |
| 10 Aug 2026 | 3,557 |
| 17 Aug 2026 | 3,242 |
| 24 Aug 2026 | 3,473 |
| 31 Aug 2026 | 2,768 |
| 7 Sep 2026 | 2,354 |
| 14 Sep 2026 | 2,902 |
| 21 Sep 2026 | 2,582 |
| 28 Sep 2026 | 24,941 |
| 5 Oct 2026 | 34,560 |
| 12 Oct 2026 | 6,201 |
| 19 Oct 2026 | 7,609 |
| 26 Oct 2026 | 6,998 |
| 2 Nov 2026 | 959 |
Weekly downloads over the last 4 weeks are 11% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.19 |
|---|---|
| Author | WebFactory |
| Added | 16 Jun 2008 |
| Last updated | 6 Oct 2026 |
| Active installs | 100,000+ |
| Requires WordPress | 4.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.2 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | login, captcha, firewall, block login, protect login |
Other plugins by this author: Maintenance, Under Construction, 301 Redirects - Redirect Manager, WP Reset, Advanced Google reCAPTCHA, Minimal Coming Soon - Coming Soon Page, Captcha Code, Custom Sidebars - Dynamic Sidebar Classic Widget Area Manager, Simple Author Box, Sticky Menu & Sticky Header, External Links - nofollow, noopener & new window, Email Log
Questions
Is Login Lockdown & Protection still maintained?
Login Lockdown & Protection was last updated on 6 Oct 2026. Its Canary status is Healthy.
Is Login Lockdown & Protection safe?
Login Lockdown & Protection has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Login Lockdown & Protection?
The wordpress.org author is WebFactory. Recent committers: WebFactory, mvandemar, plugin-master. We have recorded no ownership change.
What can I use instead of Login Lockdown & Protection?
Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.