Most Installed Login WordPress Plugins
129 indexed plugins
Plugins
129
Active Installs
6m+
Average Score
56
Audited
129
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | WPS Hide Login | 41 | 34 | 72 | 2m+ | Nonce verification recommended | ||
| #2 | Loginizer | 25 | 814 | 504 | 1m+ | Output is not escaped | ||
| #3 | Security Optimizer – The All-In-One Protection Plugin | 35 | 40 | 86 | 1m+ | Input is not sanitized | ||
| #4 | Limit Login Attempts | 40 | 81 | 38 | 300k+ | Output is not escaped | ||
| #5 | LoginPress | wp-login Custom Login Page Customizer | 55 | 125 | 308 | 200k+ | Non-prefixed function | ||
| #6 | WP Ghost (Hide My WP Ghost) – Security & Firewall | 85 | 6 | 397 | 100k+ | Non-prefixed global variable | ||
| #7 | Login Lockdown & Protection | 94 | 5 | 15 | 100k+ | Non-prefixed global variable | ||
| #8 | WPS Limit Login | 39 | 152 | 76 | 100k+ | Output is not escaped | ||
| #9 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | Non-prefixed global variable | ||
| #10 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. | 23 | 750 | 1,359 | 60k+ | Non-prefixed global variable | ||
| #11 | Theme My Login | 32 | 251 | 549 | 60k+ | Non-prefixed function | ||
| #12 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | Dynamic hook name | ||
| #13 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | Input is not sanitized | ||
| #14 | WP-Members Membership Plugin | 24 | 669 | 382 | 50k+ | Output is not escaped | ||
| #15 | Login Logo | 83 | 10 | 0 | 40k+ | Output is not escaped | ||
| #16 | One Time Login | 78 | 7 | 8 | 40k+ | Nonce verification recommended | ||
| #17 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 23 | 1,204 | 789 | 40k+ | Output is not escaped | ||
| #18 | Temporary Login | 75 | 3 | 25 | 40k+ | Nonce verification recommended | ||
| #19 | Username Changer | 84 | 37 | 13 | 40k+ | wp function not compatible with requires wp | ||
| #20 | Login as User | 36 | 101 | 64 | 30k+ | Output is not escaped | ||
| #21 | Custom Login Page Customizer – Login Designer | 22 | 588 | 1,455 | 30k+ | Non-prefixed global variable | ||
| #22 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | wp function not compatible with requires wp | ||
| #23 | XO Security | 85 | 1 | 8 | 30k+ | Input is not sanitized | ||
| #24 | Easy Hide Login | 98 | 3 | 12 | 20k+ | Non-prefixed global variable | ||
| #25 | Google Authenticator | 41 | 39 | 59 | 20k+ | Output is not escaped | ||
| #26 | Login or Logout Menu Item | 55 | 13 | 7 | 20k+ | Unsafe printing function | ||
| #27 | Auto Login for Sakura Rental Server | 35 | 3 | 3 | 10k+ | Hidden files included | ||
| #28 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | Non-prefixed hook name | ||
| #29 | Frontend Reset Password | 35 | 83 | 128 | 10k+ | Text Domain Mismatch | ||
| #30 | Login for Google Apps | 27 | 139 | 85 | 10k+ | Exception output is not escaped | ||
| #31 | Login Security Captcha | 100 | 0 | 10k+ | No open findings | |||
| #32 | Login With Ajax – Fast Logins, 2FA, Redirects | 23 | 623 | 520 | 10k+ | Output is not escaped | ||
| #33 | Simple Login Captcha | 70 | 20 | 19 | 10k+ | date date | ||
| #34 | Simple Membership After Login Redirection | 63 | 4 | 24 | 10k+ | Missing nonce verification | ||
| #35 | Uber Login Logo | 62 | 16 | 5 | 10k+ | Unsafe printing function | ||
| #36 | WP Last Login | 98 | 2 | 4 | 10k+ | trademarked term | ||
| #37 | WP Limit Login Attempts | 39 | 26 | 67 | 10k+ | Direct Query | ||
| #38 | WPS Bidouille | 28 | 472 | 215 | 10k+ | Output is not escaped | ||
| #39 | Sidebar Login | 97 | 2 | 6 | 9k+ | Non-prefixed global variable | ||
| #40 | ReCaptcha Integration for WordPress | 37 | 60 | 66 | 9k+ | Output is not escaped | ||
| #41 | Autologin Links | 38 | 73 | 74 | 8k+ | Output is not escaped | ||
| #42 | Erident Custom Login and Dashboard | 38 | 122 | 28 | 8k+ | Unsafe printing function | ||
| #43 | IP Geo Block | 23 | 399 | 589 | 8k+ | Output is not escaped | ||
| #44 | Rename wp-admin login | 42 | 23 | 38 | 8k+ | Output is not escaped | ||
| #45 | OAuth Single Sign On – SSO (OAuth Client) | 96 | 11 | 38 | 7k+ | Non-prefixed class | ||
| #46 | WP Fail2Ban Redux | 82 | 1 | 10 | 7k+ | trademarked term | ||
| #47 | WP Login Form | 48 | 14 | 20 | 7k+ | Request data is not unslashed | ||
| #48 | Add Logo to Admin | 67 | 14 | 3 | 6k+ | Unsafe printing function | ||
| #49 | Clean Login | 97 | 2 | 13 | 6k+ | Non-prefixed hook name | ||
| #50 | Login Widget With Shortcode | 26 | 335 | 198 | 6k+ | wp function not compatible with requires wp |
