Skip to content
PluginCanary

PPWP

PPWP - Password Protect Pages
by WP Folio Team · 30,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 23 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for PPWP
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Quick answers

Is PPWP still maintained?
Yes. Last release 29 Oct 2026, 23 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns PPWP, and has it changed hands?
No change recorded. Main committer buildwps since Apr 2023. 4 Nov 2026 · SVN log
Was PPWP removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is PPWP safe?
12 known vulnerabilities, all fixed (latest in 1.9.27). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest PPWP update safe to install?
No ownership change before 1.9.27. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
gaupoit10 Jul 2018 to 10 Feb 2023, 80 commits
buildwps6 Apr 2023 to 29 Oct 2026, 111 commits

2 committers recorded. No ownership change since 2018.

Maintenance

Last release
6 days ago
Releases, 24 months
23
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for PPWP
Q1 20241
Q2 20242
Q3 20243
Q4 20242
Q1 20251
Q2 20253
Q3 20252
Q4 20253
Q1 20261
Q2 20264
Q3 20265
Q4 20262

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.7.

Average rating per quarter for PPWP
Q4 20233.0
Q1 20243.7
Q2 20245.0
Q3 20243.0
Q4 20245.0
Q1 20255.0
Q4 20252.0
Q1 20265.0
Q2 20265.0
Q4 20265.0

Average rating rose from 3.0 to 5.0 between Q4 2023 and Q4 2026.

Rating distribution
5 star240
4 star6
3 star4
2 star5
1 star16
Latest low reviews

Security record

10 vulnerabilities in 24 months (12 on record), all patched (latest fixed in 1.9.27).

Show 12 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision7.2<= 1.9.261.9.27Patched before disclosure
24 Aug 2026Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.9.211.9.22Patched before disclosure
22 Aug 2026PPWP - Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles8.8<= 1.9.181.9.19Patched before disclosure
18 Aug 2026PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure4.3<= 1.9.151.9.16Patched before disclosure
15 Aug 2026Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update4.3<= 1.9.201.9.21Patched before disclosure
12 Aug 2026PPWP - Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4<= 1.9.211.9.22Patched before disclosure
26 Jun 2026PPWP - Password Protect Pages <= 1.9.19 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 1.9.191.9.20Patched before disclosure
23 Mar 2026PPWP - Password Protect Pages <= 1.9.15 - Missing Authorization4.3<= 1.9.151.9.16Patched before disclosure
25 Aug 2025PPWP - Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST API4.3<= 1.9.101.9.11Patched before disclosure
16 Dec 2024PPWP - Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3<= 1.9.51.9.6Patched before disclosure
7 Feb 2024PPWP - Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass5.3<= 1.8.91.9.02
10 Jan 2023PPWP - WordPress Password Protect Page <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.8.51.8.6Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 2 support threads resolved in the last 2 months.

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PPWP
4 May 2026733
11 May 202616,514
18 May 20265,212
25 May 20262,481
1 Jun 20261,850
8 Jun 202615,422
15 Jun 202616,657
22 Jun 20263,598
29 Jun 20262,617
6 Jul 20263,826
13 Jul 20261,676
20 Jul 20261,686
27 Jul 20261,475
3 Aug 202614,636
10 Aug 202620,430
17 Aug 20264,175
24 Aug 202616,627
31 Aug 202617,498
7 Sep 20263,602
14 Sep 20264,197
21 Sep 202620,000
28 Sep 202616,697
5 Oct 20266,244
12 Oct 20262,252
19 Oct 20262,977
26 Oct 202617,181
2 Nov 20261,234

Weekly downloads over the last 4 weeks are 28% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

My Private SiteScore 91 · 10,000+Simple Membership After LoginScore 91 · 10,000+Restricted Site AccessScore 90 · 10,000+Restrict User AccessScore 89 · 10,000+Password ProtectedScore 88 · 300,000+

Facts

Version1.9.27
AuthorWP Folio Team
Added10 Jul 2018
Last updated29 Oct 2026
Active installs30,000+
Requires WordPress5.2
Tested up to7.1.4
Requires PHP5.6
CategoryE-commerce & Shopping
Tagspassword, sitewide, Password Protect, restrict content, password protection

Other plugins by this author: Prevent Direct Access - Protect WordPress Files

Questions

Is PPWP still maintained?

Yes. Last release 29 Oct 2026, 23 releases in the last 24 months.

Who owns PPWP, and has it changed hands?

No change recorded. Main committer buildwps since Apr 2023.

Was PPWP removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is PPWP safe?

12 known vulnerabilities, all fixed (latest in 1.9.27). Not on the exploited list.

Is the latest PPWP update safe to install?

No ownership change before 1.9.27. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue