Login With Ajax - Fast Logins, 2FA, Redirects
Avoid: vulnerability published 1 Sep 2026 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 85 |
| Security | 30 |
| Support | 70 |
| Reputation | 85 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 1 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.15 Sep 2026Evidence
- CriticalSEC-2Vulnerability published 18 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.1 Sep 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| netweblogic | 3 Aug 2009 to 25 Feb 2024, 139 commits |
|---|---|
| msykes | 28 Apr 2023 to 3 Dec 2025, 16 commits |
| pixelitemedia | 24 May 2026 to 24 May 2026, 1 commits |
New committer pixelitemedia made a first commit on 24 May 2026.
Maintenance
- Last release
- 5 months ago
- Releases, 24 months
- 3
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 5.2 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 0 |
| Q3 2025 | 2 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 24 May 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
50% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 1 Sep 2026 | Login With Ajax – Fast Logins, 2FA, Redirects <= 4.5.1 - Authenticated (Customer+) Stored Cross-Site Scripting | 6.4 | <= 4.5.1 | No fix | n/a |
| 18 Aug 2026 | Login With Ajax – Fast Logins, 2FA, Redirects <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 4.5.1 | No fix | n/a |
| 10 Apr 2024 | Login With Ajax <= 4.1 - Cross-Site Request Forgery to Notice Dismissal | 4.3 | <= 4.1 | 4.2 | 0 |
| 7 Dec 2023 | Login With Ajax <= 4.1 - Missing Authorization | 5.3 | <= 4.1 | 4.2 | 118 |
| 11 Apr 2017 | Login With Ajax <= 3.1.6 - Cross-Site Scripting | 5.4 | <= 3.1.6 | 3.1.7 | 0 |
| 6 May 2013 | Login With Ajax < 3.1 - Cross-Site Request Forgery | 6.3 | < 3.1 | 3.1 | 0 |
| 18 May 2012 | Login With Ajax <= 3.0.4 - Cross-Site Scripting | 6.1 | <= 3.0.4 | 3.0.4.1 | 0 |
| 7 May 2012 | Login With Ajax < 3.0.4.1 - Cross-Site Scripting | 6.1 | < 3.0.4.1 | 3.0.5 | n/a |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 4.4 |
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q3 2025 | 5.0 |
| Q4 2026 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q4 2026.
| 5 star | 140 |
|---|---|
| 4 star | 11 |
| 3 star | 4 |
| 2 star | 3 |
| 1 star | 9 |
- Attention - nasty trap · 2 stars · 28 Feb 2024
- Bug · 1 star · 23 Oct 2022
- Beautiful … yes. Support … what support? · 2 stars · 10 Jun 2022
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 198 |
|---|---|
| 11 May 2026 | 338 |
| 18 May 2026 | 366 |
| 25 May 2026 | 391 |
| 1 Jun 2026 | 334 |
| 8 Jun 2026 | 342 |
| 15 Jun 2026 | 301 |
| 22 Jun 2026 | 269 |
| 29 Jun 2026 | 273 |
| 6 Jul 2026 | 306 |
| 13 Jul 2026 | 295 |
| 20 Jul 2026 | 313 |
| 27 Jul 2026 | 326 |
| 3 Aug 2026 | 331 |
| 10 Aug 2026 | 312 |
| 17 Aug 2026 | 327 |
| 24 Aug 2026 | 348 |
| 31 Aug 2026 | 352 |
| 7 Sep 2026 | 311 |
| 14 Sep 2026 | 343 |
| 21 Sep 2026 | 440 |
| 28 Sep 2026 | 496 |
| 5 Oct 2026 | 426 |
| 12 Oct 2026 | 420 |
| 19 Oct 2026 | 604 |
| 26 Oct 2026 | 558 |
| 2 Nov 2026 | 99 |
Weekly downloads over the last 4 weeks are 20% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 4.5.1 |
|---|---|
| Author | Marcus (aka @msykes) |
| Added | 3 Aug 2009 |
| Last updated | 24 May 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 4.8 |
| Tested up to | 7.0.8 |
| Requires PHP | 5.2 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | 2FA, login, passkeys, security, registration |
Other plugins by this author: Meta Tag Manager, Events Manager - Calendar, Bookings, Tickets, Appointments and more!, WP FullCalendar, Disable User Gravatar, WP Safe Mode, Events Manager and WPML Compatibility, Events Manager - Zoom Integration, Twitter Goodies Widgets, Cursor Trail, User Role Sync for MailPoet, Plugin Commander, BP Expand Activity
Questions
Is Login With Ajax - Fast Logins, 2FA, Redirects still maintained?
Login With Ajax - Fast Logins, 2FA, Redirects was last updated on 24 May 2026. Its Canary status is Avoid.
Is Login With Ajax - Fast Logins, 2FA, Redirects safe?
Login With Ajax - Fast Logins, 2FA, Redirects has 2 published vulnerabilities with no patched version. Its Canary status is Avoid.
Who owns Login With Ajax - Fast Logins, 2FA, Redirects?
The wordpress.org author is Marcus (aka @msykes). Recent committers: pixelitemedia, msykes, netweblogic, plugin-master. New committer pixelitemedia made a first commit on 24 May 2026.
What can I use instead of Login With Ajax - Fast Logins, 2FA, Redirects?
Plugins in the same category with a higher Canary Score: LoginWP (Formerly Peter's Login Redirect), Simple User Avatar, Gravatar Enhanced - Avatars, Profiles, and Privacy, WP User Avatars, Sidebar Login.