Skip to content
PluginCanary

Melapress Login Security

by Melapress · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 17 Sep 2026, 9 releases in 24 months, no unpatched vulnerabilities.

85/ 100 Canary Score
Sub-scores for Melapress Login Security
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Quick answers

Is Melapress Login Security still maintained?
Yes. Last release 17 Sep 2026, 9 releases in the last 24 months. 17 Sep 2026 · wordpress.org
Who owns Melapress Login Security, and has it changed hands?
No change recorded. Main committer melapress since Aug 2023. 3 Nov 2026 · SVN log
Was Melapress Login Security removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Melapress Login Security safe?
4 known vulnerabilities, all fixed (latest in 2.2.0). Not on the exploited list. 25 Jul 2025 · Wordfence Intelligence
Is the latest Melapress Login Security update safe to install?
No ownership change before 2.4.2. No one-star spike after it. 17 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master4 Feb 2023 to 4 Feb 2023, 1 commits
WPWhiteSecurity23 Feb 2023 to 17 Nov 2023, 22 commits
melapress9 Aug 2023 to 17 Sep 2026, 50 commits

3 committers recorded. No ownership change since 2023.

Maintenance

Last release
48 days ago
Releases, 24 months
9
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for Melapress Login Security
Q1 20242
Q2 20242
Q3 20240
Q4 20242
Q1 20251
Q2 20251
Q3 20251
Q4 20251
Q1 20261
Q2 20260
Q3 20262
Q4 20260

Last release 17 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star19
4 star0
3 star0
2 star0
1 star1

Security record

3 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 2.2.0).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
25 Jul 2025MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function9.82.1.0 to 2.1.12.2.0Patched before disclosure
16 Apr 2025MelaPress Login Security <= 2.1.0 - Authenticated (Administrator+) PHP Object Injection7.2<= 2.1.02.1.1Patched before disclosure
7 Apr 2025MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion5.32.1.02.1.1Patched before disclosure
3 Jun 2024MelaPress Login Security <= 1.3.0 - Authenticated (Admin+) Remote File Inclusion6.6<= 1.3.01.3.1Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Melapress Login Security
4 May 202662
11 May 2026140
18 May 2026178
25 May 2026173
1 Jun 2026163
8 Jun 2026153
15 Jun 2026272
22 Jun 2026113
29 Jun 2026119
6 Jul 2026149
13 Jul 2026156
20 Jul 2026176
27 Jul 2026162
3 Aug 2026155
10 Aug 2026219
17 Aug 2026225
24 Aug 2026254
31 Aug 20261,535
7 Sep 2026557
14 Sep 20261,634
21 Sep 2026738
28 Sep 2026450
5 Oct 2026527
12 Oct 2026642
19 Oct 2026844
26 Oct 2026683
2 Nov 2026104

Weekly downloads over the last 4 weeks are 45% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuthScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version2.4.2
AuthorMelapress
Added23 Feb 2023
Last updated17 Sep 2026
Active installs3,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP8.0
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagslogin, Brute Force, limit logins, login security, limit login attempts

Other plugins by this author: WP Activity Log, WP 2FA - Two-factor authentication for WordPress, Admin Notices Manager, Melapress File Monitor, Melapress Role Editor

Questions

Is Melapress Login Security still maintained?

Yes. Last release 17 Sep 2026, 9 releases in the last 24 months.

Who owns Melapress Login Security, and has it changed hands?

No change recorded. Main committer melapress since Aug 2023.

Was Melapress Login Security removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Melapress Login Security safe?

4 known vulnerabilities, all fixed (latest in 2.2.0). Not on the exploited list.

Is the latest Melapress Login Security update safe to install?

No ownership change before 2.4.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue