Skip to content
PluginCanary

WPS Hide Login

by Remy Perona · 2,000,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: released 3 months ago, tested with WordPress 7.1, no open vulnerabilities.

95/ 100Healthy
Canary Score

Based on 4 of 5 areas

Capped at 95: not enough support or review data for a full score.

Sub-scores for WPS Hide Login
Ownership100
Maintenance100
Security100
SupportNo data
Reputation70

How the score works

Active signals

Open issues right now, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

History: 10 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is WPS Hide Login still maintained?
Yes. Last release 13 Aug 2026, 3 releases in the last 24 months. 13 Aug 2026 · wordpress.org
Who owns WPS Hide Login, and has it changed hands?
No change recorded. Main committer NicolasKulka since Feb 2018. 5 Nov 2026 · SVN log
Was WPS Hide Login removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is WPS Hide Login safe?
10 known vulnerabilities, all fixed (latest in 1.9.16.4). Not on the exploited list. 24 Jun 2024 · Wordfence Intelligence
Is the latest WPS Hide Login update safe to install?
No ownership change before 1.9.19. No one-star spike after it. 13 Aug 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
NicolasKulka1 Feb 2018 to 13 Aug 2026, 105 commits

1 committer recorded. No ownership changes recorded since 2015.

Maintenance

Last release
3 months ago
Releases, 24 months
3
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for WPS Hide Login
Q1 20245
Q2 202411
Q3 20240
Q4 20242
Q1 20250
Q2 20251
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20261
Q4 20260

Last release 13 Aug 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
0%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

10 vulnerabilities on record, all patched (latest fixed in 1.9.16.4).

Show 10 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
24 Jun 2024Login Page Disclosure5.3<= 1.9.16.31.9.16.4Before disclosure
10 Jun 2024Login Page Disclosure5.3<= 1.9.15.21.9.16Before disclosure
10 Jan 2024Hidden Login Page Location Disclosure3.7<= 1.9.111.9.126
27 Oct 2021Hidden Login Page Location Disclosure5.3<= 1.9.01.9.17
27 Jan 2020Hidden Login Page Location Disclosure5.3<= 1.5.4.21.5.5Before disclosure
23 Jul 2019Login Page Disclosure via 'action=rp'5.3<= 1.5.2.21.5.3Same day
23 Jul 2019Login Page Disclosure via Referer Header5.3<= 1.5.2.21.5.3Same day
23 Jul 2019Login Page Disclosure via 'action=confirmaction'5.3< 1.5.31.5.3Same day
22 Jul 2019Login Page Disclosure via 'adminhash'5.3<= 1.5.2.21.5.31
27 Apr 2015Cross-Site Request Forgery8.8< 1.11.1Same day

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: 3.7 (3 reviews). Lifetime: 4.8.

Last 90 days vs lifetime average rating for WPS Hide Login
Last 90 days3.7
Lifetime4.8
Average rating per quarter
Average rating per quarter for WPS Hide Login
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20253.3
Q2 20253.4
Q3 20254.0
Q4 20255.0
Q1 20263.4
Q2 20263.9
Q3 20263.7

Average rating fell from 5.0 to 3.7 between Q2 2024 and Q3 2026.

Rating distribution
5 star1987
4 star35
3 star19
2 star8
1 star62
Latest low reviews

Momentum

Active installs
2,000,000+
Downloads, last full week
60,898
Weekly downloads, last 26 complete weeks
Weekly downloads for WPS Hide Login
4 May 202612,302
11 May 202638,775
18 May 202639,017
25 May 202635,579
1 Jun 202633,640
8 Jun 202634,282
15 Jun 202631,698
22 Jun 202630,218
29 Jun 202630,162
6 Jul 202629,716
13 Jul 202629,206
20 Jul 202635,311
27 Jul 202632,006
3 Aug 202633,024
10 Aug 2026648,384
17 Aug 2026230,661
24 Aug 2026124,392
31 Aug 2026100,480
7 Sep 202675,748
14 Sep 202670,035
21 Sep 202666,574
28 Sep 202661,875
5 Oct 202656,719
12 Oct 202653,373
19 Oct 202674,197
26 Oct 202660,898

Weekly downloads over the last 4 weeks are 23% below the 26-week average.

Facts

Version
1.9.19
Author
Remy Perona
Added
23 Apr 2015
Last updated
13 Aug 2026
Active installs
2,000,000+
Requires WordPress
4.1
Tested up to
7.1.4
Requires PHP
7.0
Category
Security & Privacy > Security Scanning & Malware Protection
Tags
login, rename, wp login, wp-login.php, custom login url

Other plugins by this author: Rich Contact Widget, WP News feed widget, Google Knowledge Phone Number

Questions about WPS Hide Login

Is WPS Hide Login still maintained?

Yes. Last release 13 Aug 2026, 3 releases in the last 24 months.

Who owns WPS Hide Login, and has it changed hands?

No change recorded. Main committer NicolasKulka since Feb 2018.

Was WPS Hide Login removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is WPS Hide Login safe?

10 known vulnerabilities, all fixed (latest in 1.9.16.4). Not on the exploited list.

Is the latest WPS Hide Login update safe to install?

No ownership change before 1.9.19. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue