Skip to content
PluginCanary

Password Protected

by Saad Iqbal · 300,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 28 Oct 2026, fixed in 2.8.5.

88/ 100 Canary Score
Sub-scores for Password Protected
Ownership100
Maintenance100
Security80
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 2.8.5. Update to version 2.8.5 or later.28 Oct 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
husobj2 Feb 2012 to 31 Aug 2021, 96 commits
wpexpertsio9 Mar 2022 to 30 Oct 2026, 127 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
15
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Password Protected
Q1 20244
Q2 20241
Q3 20240
Q4 20242
Q1 20252
Q2 20250
Q3 20253
Q4 20251
Q1 20260
Q2 20263
Q3 20262
Q4 20262

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler6.4<= 2.8.42.8.50
3 Aug 2026Password Protected <= 2.8.3 - Unauthenticated Information Exposure5.3<= 2.8.32.8.40
24 Oct 2025Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofing3.7<= 2.7.112.7.120
16 Apr 2025Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure5.3<= 2.7.72.7.8n/a
14 May 2024Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure4.3<= 2.6.62.6.70
19 Feb 2024Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.6.62.6.70
13 Jun 2023Password Protected <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.6.22.6.30

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Password Protected
Q2 20245.0
Q3 20243.8
Q4 20243.3
Q1 20253.8
Q2 20254.5
Q3 20254.8
Q4 20252.0
Q2 20264.3
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q4 2026.

Rating distribution
5 star111
4 star8
3 star6
2 star6
1 star11
Latest low reviews

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Password Protected
4 May 20266,468
11 May 202612,819
18 May 202622,288
25 May 202611,406
1 Jun 2026108,303
8 Jun 202621,796
15 Jun 202614,808
22 Jun 202612,083
29 Jun 2026114,019
6 Jul 202629,424
13 Jul 2026115,138
20 Jul 202626,219
27 Jul 2026110,283
3 Aug 202631,632
10 Aug 202613,969
17 Aug 202613,114
24 Aug 202614,905
31 Aug 202617,651
7 Sep 20269,159
14 Sep 20269,029
21 Sep 20269,581
28 Sep 20268,990
5 Oct 20269,159
12 Oct 20268,043
19 Oct 202616,426
26 Oct 2026221,846
2 Nov 20269,463

Weekly downloads over the last 4 weeks are 73% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Membership After Login RedirectionScore 91 · 10,000+My Private Site - Make Your Whole Site Private, Force Login & Block Registration SpamScore 91 · 10,000+Simple Membership Form ShortcodeScore 91 · 2,000+SureMembers - Membership & Content Restriction PluginScore 91 · 2,000+Groups 404 RedirectScore 91 · 1,000+

Facts

Version2.8.6
AuthorSaad Iqbal
Added2 Feb 2012
Last updated30 Oct 2026
Active installs300,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagsmaintenance mode, Password Protect, restrict content, password protection, password protect page

Other plugins by this author: CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App, Advanced File Manager - Ultimate File Manager for WordPress And Document Library Solution, All In One Login, Social Preview and Open Graph Tags, Email Templates Customizer and Designer for WordPress and WooCommerce, Gutena Forms - Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder, WC Hide Shipping Methods, New User Approve, Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred, License Manager for WooCommerce, Gutena Tabs

Questions

Is Password Protected still maintained?

Password Protected was last updated on 30 Oct 2026. Its Canary status is Healthy.

Is Password Protected safe?

Password Protected has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Password Protected?

The wordpress.org author is Saad Iqbal. Recent committers: wpexpertsio, husobj, plugin-master. We have recorded no ownership change.

What can I use instead of Password Protected?

Plugins in the same category with a higher Canary Score: Simple Membership After Login Redirection, My Private Site - Make Your Whole Site Private, Force Login & Block Registration Spam, Simple Membership Form Shortcode, SureMembers - Membership & Content Restriction Plugin, Groups 404 Redirect.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue