Skip to content
PluginCanary

Persistent Login

by lukeseager · 5,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 30 Sep 2026, fixed in 3.1.4.

86/ 100 Canary Score
Sub-scores for Persistent Login
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 3.1.4. Update to version 3.1.4 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 3.1.1. Update to version 3.1.1 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 19 Aug 2026, fixed in 3.1.1. Update to version 3.1.1 or later.19 Aug 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
lukeseager27 Mar 2018 to 11 Oct 2026, 137 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
24 days ago
Releases, 24 months
20
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Persistent Login
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20250
Q1 20264
Q2 20260
Q3 202614
Q4 20261

Last release 11 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Sep 2026Persistent Login <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.1.33.1.40
31 Aug 2026Persistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection via 'wppl_device_id' Cookie6.5<= 3.1.03.1.10
19 Aug 2026Persistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection6.5<= 3.1.03.1.10
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 2.0.142.0.15125
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 2.0.02.0.065

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.9 from 26 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star18
4 star1
3 star0
2 star1
1 star6

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Persistent Login
4 May 2026159
11 May 20262,180
18 May 20261,197
25 May 2026398
1 Jun 2026285
8 Jun 2026208
15 Jun 2026199
22 Jun 2026206
29 Jun 2026193
6 Jul 2026151
13 Jul 2026126
20 Jul 2026134
27 Jul 20262,231
3 Aug 20261,073
10 Aug 20263,845
17 Aug 20261,774
24 Aug 20262,340
31 Aug 2026981
7 Sep 2026461
14 Sep 2026545
21 Sep 20262,338
28 Sep 20261,090
5 Oct 20262,241
12 Oct 20261,460
19 Oct 2026697
26 Oct 2026639
2 Nov 202678

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version3.1.5
Authorlukeseager
Added22 Aug 2014
Last updated11 Oct 2026
Active installs5,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.4
CategoryUser Management & Authentication > User Registration & Login
Tagslogin, remember me, active logins, login history, session management

Questions

Is Persistent Login still maintained?

Persistent Login was last updated on 11 Oct 2026. Its Canary status is Healthy.

Is Persistent Login safe?

Persistent Login has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Persistent Login?

The wordpress.org author is lukeseager. Recent committers: lukeseager, b9media, plugin-master. We have recorded no ownership change.

What can I use instead of Persistent Login?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue