Skip to content
PluginCanary

WP fail2ban

WP fail2ban - Advanced Security
by invisnet · 60,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 20 Oct 2026, 6 releases in 24 months, no unpatched vulnerabilities.

98/ 100 Canary Score
Sub-scores for WP fail2ban
Ownership100
Maintenance100
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WP fail2ban still maintained?
Yes. Last release 20 Oct 2026, 6 releases in the last 24 months. 20 Oct 2026 · wordpress.org
Who owns WP fail2ban, and has it changed hands?
No change recorded. Main committer invisnet since Oct 2012. 4 Nov 2026 · SVN log
Was WP fail2ban removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP fail2ban safe?
3 known vulnerabilities, all fixed (latest in 5.4.0). Not on the exploited list. 30 Apr 2026 · Wordfence Intelligence
Is the latest WP fail2ban update safe to install?
No ownership change before 5.5.0. No one-star spike after it. 20 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
invisnet19 Oct 2012 to 20 Oct 2026, 197 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
15 days ago
Releases, 24 months
6
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WP fail2ban
Q1 20242
Q2 20240
Q3 20243
Q4 20242
Q1 20252
Q2 20251
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 20261

Last release 20 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Average rating per quarter for WP fail2ban
Q2 20245.0
Q3 20241.0
Q2 20251.0
Q3 20251.0

Average rating fell from 5.0 to 1.0 between Q2 2024 and Q3 2025.

Rating distribution
5 star51
4 star4
3 star2
2 star4
1 star10
Latest low reviews

Security record

1 vulnerability in 24 months (3 on record), patched (latest fixed in 5.4.0).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 5.3.45.4.0Patched before disclosure
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 4.4.0.24.4.0.248
25 Feb 2019Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update8.8< 4.0.54.0.5n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

60,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP fail2ban
4 May 2026448
11 May 20261,433
18 May 20261,478
25 May 20261,361
1 Jun 20261,314
8 Jun 20261,264
15 Jun 20261,460
22 Jun 20261,146
29 Jun 20261,122
6 Jul 20261,287
13 Jul 20261,239
20 Jul 20261,627
27 Jul 20261,186
3 Aug 20261,234
10 Aug 20261,262
17 Aug 20261,295
24 Aug 20261,306
31 Aug 20261,337
7 Sep 20261,296
14 Sep 20261,213
21 Sep 20261,258
28 Sep 202623,268
5 Oct 20268,851
12 Oct 20264,611
19 Oct 202630,623
26 Oct 20268,030
2 Nov 2026772

Weekly downloads over the last 4 weeks are 189% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Disable WP REST APIScore 100 · 30,000+AntiVirusScore 100 · 30,000+Protect UploadsScore 100 · 30,000+

Facts

Version5.5.0
Authorinvisnet
Added19 Oct 2012
Last updated20 Oct 2026
Active installs60,000+
Requires WordPress4.2
Tested up to7.1.4
Requires PHP7.4
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagslogin, syslog, fail2ban, security, Brute Force

Other plugins by this author: WP fail2ban Blocklist, WP fail2ban Add-on for Contact Form 7, WP fail2ban Add-on for Gravity Forms, WP Page Tree, WP Mercurial, WP REST API Security, WP Autoload, Gopherduct, WP PGP email

Questions

Is WP fail2ban still maintained?

Yes. Last release 20 Oct 2026, 6 releases in the last 24 months.

Who owns WP fail2ban, and has it changed hands?

No change recorded. Main committer invisnet since Oct 2012.

Was WP fail2ban removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP fail2ban safe?

3 known vulnerabilities, all fixed (latest in 5.4.0). Not on the exploited list.

Is the latest WP fail2ban update safe to install?

No ownership change before 5.5.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue