User Login History
Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| faiyazalam | 7 May 2016 to 17 Mar 2026, 190 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 8 months ago
- Releases, 24 months
- 2
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 17 Mar 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Support
100% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 15 Aug 2026 | User Login History <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter | 4.9 | <= 2.1.7 | 2.1.8 | 0 |
| 7 May 2025 | User Login History <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 2.1.6 | 2.1.7 | 40 |
| 16 Mar 2019 | User Login History <= 1.7.0 - SQL Injection via Order By | 8.8 | 1.7.0 | 1.7.1 | 155 |
| 16 Mar 2019 | User Login History <= 1.7.0 - SQL Injection via OrderBy | 8.8 | 1.7.0 | 1.7.1 | 155 |
| 26 Oct 2017 | User Login History Plugin <= 1.5.2 - Cross-Site Scripting | 6.1 | < 1.6 | 1.6 | 922 |
Source: Wordfence Intelligence.
Reputation
| Q2 2024 | 1.0 |
|---|---|
| Q3 2024 | 5.0 |
| Q4 2025 | 5.0 |
| Q3 2026 | 2.0 |
Average rating rose from 1.0 to 2.0 between Q2 2024 and Q3 2026.
| 5 star | 24 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 2 |
- Poorly optimized for long-running sites · 2 stars · 25 Aug 2026
- I don’t see the list immediately after installation · 1 star · 21 May 2024
- Crashes web server! · 1 star · 29 Nov 2022
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 265 |
|---|---|
| 11 May 2026 | 545 |
| 18 May 2026 | 871 |
| 25 May 2026 | 540 |
| 1 Jun 2026 | 426 |
| 8 Jun 2026 | 398 |
| 15 Jun 2026 | 355 |
| 22 Jun 2026 | 373 |
| 29 Jun 2026 | 334 |
| 6 Jul 2026 | 351 |
| 13 Jul 2026 | 306 |
| 20 Jul 2026 | 496 |
| 27 Jul 2026 | 420 |
| 3 Aug 2026 | 409 |
| 10 Aug 2026 | 370 |
| 17 Aug 2026 | 630 |
| 24 Aug 2026 | 455 |
| 31 Aug 2026 | 437 |
| 7 Sep 2026 | 361 |
| 14 Sep 2026 | 429 |
| 21 Sep 2026 | 411 |
| 28 Sep 2026 | 422 |
| 5 Oct 2026 | 509 |
| 12 Oct 2026 | 387 |
| 19 Oct 2026 | 789 |
| 26 Oct 2026 | 704 |
| 2 Nov 2026 | 100 |
Weekly downloads over the last 4 weeks are 11% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.1.8 |
|---|---|
| Author | Faiyaz Alam |
| Added | 7 May 2016 |
| Last updated | 17 Mar 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 6.2 |
| Tested up to | 6.9.11 |
| Requires PHP | 7.4 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | history, login log, Brute Force, login tacker, login activity |
Questions
Is User Login History still maintained?
User Login History was last updated on 17 Mar 2026. Its Canary status is Watch.
Is User Login History safe?
User Login History has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Watch.
Who owns User Login History?
The wordpress.org author is Faiyaz Alam. Recent committers: faiyazalam, plugin-master. We have recorded no ownership change.
What can I use instead of User Login History?
Plugins in the same category with a higher Canary Score: WP Last Login, Activity Log - Monitor User and Agent Changes, When Last Login, User Activity Tracking and Log, Simple Login Notification.