Login-Logout
Avoid: vulnerability published 22 Sep 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 22 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Oct 2025Evidence
- CriticalMNT-1No release in 75 months (last release 5 Sep 2020). Plan a replacement if the plugin is important to your site.5 Sep 2021Evidence
- WarningMNT-2Tested up to WordPress 5.5.24, 16 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| webvitaly | 12 May 2011 to 5 Sep 2020, 56 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 6 years ago
- Releases, 24 months
- 0
- Tested up to
- 5.5 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 5 Sep 2020. Tested up to 5.5, 16 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Sep 2025 | Login-Logout <= 3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 3.8 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 25 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 24 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 19 |
|---|---|
| 11 May 2026 | 28 |
| 18 May 2026 | 34 |
| 25 May 2026 | 45 |
| 1 Jun 2026 | 36 |
| 8 Jun 2026 | 37 |
| 15 Jun 2026 | 37 |
| 22 Jun 2026 | 25 |
| 29 Jun 2026 | 33 |
| 6 Jul 2026 | 31 |
| 13 Jul 2026 | 36 |
| 20 Jul 2026 | 41 |
| 27 Jul 2026 | 40 |
| 3 Aug 2026 | 56 |
| 10 Aug 2026 | 55 |
| 17 Aug 2026 | 63 |
| 24 Aug 2026 | 54 |
| 31 Aug 2026 | 47 |
| 7 Sep 2026 | 59 |
| 14 Sep 2026 | 84 |
| 21 Sep 2026 | 61 |
| 28 Sep 2026 | 89 |
| 5 Oct 2026 | 63 |
| 12 Oct 2026 | 67 |
| 19 Oct 2026 | 111 |
| 26 Oct 2026 | 119 |
| 2 Nov 2026 | 12 |
Weekly downloads over the last 4 weeks are 51% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 3.8 |
|---|---|
| Author | webvitalii |
| Added | 12 May 2011 |
| Last updated | 5 Sep 2020 |
| Active installs | 2,000+ |
| Requires WordPress | 4.0 |
| Tested up to | 5.5.24 |
| Requires PHP | not stated |
| Category | User Management & Authentication > User Registration & Login |
| Tags | meta, login, logout, widget, sidebar |
Other plugins by this author: iframe, Page-list, Filenames to latin, Sitekit, Extra Shortcodes, Taxonomy Checklist Tree, Security-Protection, Search by Google, info, Comments-advanced, Easy-to-use, Ip2country
Questions
Is Login-Logout still maintained?
Login-Logout was last updated on 5 Sep 2020. Its Canary status is Avoid.
Is Login-Logout safe?
Login-Logout has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Login-Logout?
The wordpress.org author is webvitalii. Recent committers: webvitaly, plugin-master. We have recorded no ownership change.
What can I use instead of Login-Logout?
We have no healthier plugin in the same category on record yet.