Simple JWT Login
Healthy: maintained, last release 9 Aug 2026, 14 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 60 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Simple JWT Login still maintained?
- Yes. Last release 9 Aug 2026, 14 releases in the last 24 months. 9 Aug 2026 · wordpress.org
- Who owns Simple JWT Login, and has it changed hands?
- No change recorded. Main committer nicu_m since Jun 2019. 3 Nov 2026 · SVN log
- Was Simple JWT Login removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Simple JWT Login safe?
- 6 known vulnerabilities, all fixed (latest in 3.6.8). Not on the exploited list. 5 Oct 2026 · Wordfence Intelligence
- Is the latest Simple JWT Login update safe to install?
- No ownership change before 3.6.8. No one-star spike after it. 9 Aug 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 12 Jun 2019 to 12 Jun 2019, 1 commits |
|---|---|
| nicu_m | 14 Jun 2019 to 9 Oct 2026, 108 commits |
2 committers recorded. No ownership change since 2019.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 14
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 5.5 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 2 |
| Q2 2025 | 4 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 1 |
| Q2 2026 | 1 |
| Q3 2026 | 4 |
| Q4 2026 | 1 |
Last release 9 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 5.0.
| 5 star | 46 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Security record
4 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 3.6.8).
Show 6 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2026 | Simple JWT Login - Allows you to use JWT on REST endpoints. 4.0.0 - Missing Authorization | 4.3 | 4.0.0 | Not affected | n/a |
| 20 Aug 2026 | Simple JWT Login - Allows you to use JWT on REST endpoints. < 3.6.8 - Unauthenticated Privilege Escalation | 7.3 | < 3.6.8 | 3.6.8 | Patched before disclosure |
| 10 Jul 2026 | Simple JWT Login <= 3.6.6 - Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation via 'payload' Parameter | 8.8 | <= 3.6.6 | 3.6.7 | Patched before disclosure |
| 22 Sep 2025 | Simple JWT Login <= 3.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 3.6.4 | 3.6.5 | 173 |
| 18 Oct 2021 | Simple JWT Login <= 3.2.0 - Cross-Site Request Forgery | 8.8 | < 3.2.1 | 3.2.1 | 444 |
| 13 Oct 2021 | Simple JWT Login <= 3.2.1 - Insecure Password Creation | 7.5 | < 3.3.0 | 3.3.0 | 449 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 1 support threads resolved in the last 2 months.
Momentum
4,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 137 |
|---|---|
| 11 May 2026 | 238 |
| 18 May 2026 | 1,182 |
| 25 May 2026 | 456 |
| 1 Jun 2026 | 425 |
| 8 Jun 2026 | 353 |
| 15 Jun 2026 | 332 |
| 22 Jun 2026 | 269 |
| 29 Jun 2026 | 303 |
| 6 Jul 2026 | 1,454 |
| 13 Jul 2026 | 711 |
| 20 Jul 2026 | 431 |
| 27 Jul 2026 | 387 |
| 3 Aug 2026 | 1,150 |
| 10 Aug 2026 | 926 |
| 17 Aug 2026 | 589 |
| 24 Aug 2026 | 783 |
| 31 Aug 2026 | 1,425 |
| 7 Sep 2026 | 944 |
| 14 Sep 2026 | 646 |
| 21 Sep 2026 | 585 |
| 28 Sep 2026 | 796 |
| 5 Oct 2026 | 751 |
| 12 Oct 2026 | 830 |
| 19 Oct 2026 | 985 |
| 26 Oct 2026 | 831 |
| 2 Nov 2026 | 244 |
Weekly downloads over the last 4 weeks are 7% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 3.6.8 |
|---|---|
| Author | Nicu Micle |
| Added | 14 Jun 2019 |
| Last updated | 9 Aug 2026 |
| Active installs | 4,000+ |
| Requires WordPress | 4.4.0 |
| Tested up to | 7.0.8 |
| Requires PHP | 5.5 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | api, jwt, tokens, register, auto login |
Other plugins by this author: Simple JWT Login MailPoet - Login users from newsletter
Questions
Is Simple JWT Login still maintained?
Yes. Last release 9 Aug 2026, 14 releases in the last 24 months.
Who owns Simple JWT Login, and has it changed hands?
No change recorded. Main committer nicu_m since Jun 2019.
Was Simple JWT Login removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Simple JWT Login safe?
6 known vulnerabilities, all fixed (latest in 3.6.8). Not on the exploited list.
Is the latest Simple JWT Login update safe to install?
No ownership change before 3.6.8. No one-star spike after it.