Login WordPress Plugins That Need Review
129 indexed plugins
Plugins
129
Active Installs
6m+
Average Score
56
Audited
129
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Custom Login Page Customizer – Login Designer | 22 | 588 | 1,455 | 30k+ | Non-prefixed global variable | ||
| #2 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | Exception output is not escaped | ||
| #3 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. | 23 | 750 | 1,359 | 60k+ | Non-prefixed global variable | ||
| #4 | IP Geo Block | 23 | 399 | 589 | 8k+ | Output is not escaped | ||
| #5 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | Non-prefixed global variable | ||
| #6 | Login With Ajax – Fast Logins, 2FA, Redirects | 23 | 623 | 520 | 10k+ | Output is not escaped | ||
| #7 | Legal Terms and Conditions Popup for User Login and WooCommerce Checkout | 23 | 524 | 237 | 700 | Output is not escaped | ||
| #8 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | Text Domain Mismatch | ||
| #9 | Admin Tweaks | 24 | 1,507 | 206 | 1k+ | Text Domain Mismatch | ||
| #10 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,188 | 770 | 30k+ | Output is not escaped | ||
| #11 | WP-Members Membership Plugin | 24 | 669 | 382 | 50k+ | Output is not escaped | ||
| #12 | Login Widget With Shortcode | 25 | 335 | 198 | 6k+ | wp function not compatible with requires wp | ||
| #13 | Loginizer | 25 | 814 | 504 | 1m+ | Output is not escaped | ||
| #14 | SP Move Login | 26 | 881 | 215 | 6k+ | Text Domain Mismatch | ||
| #15 | Login for Google Apps | 27 | 139 | 85 | 10k+ | Exception output is not escaped | ||
| #16 | Login Security Solution | 27 | 216 | 154 | 4k+ | Output is not escaped | ||
| #17 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | Input is not sanitized | ||
| #18 | AJAX Login and Registration modal popup + inline form | 28 | 157 | 261 | 3k+ | Output is not escaped | ||
| #19 | WPS Bidouille | 28 | 472 | 215 | 10k+ | Output is not escaped | ||
| #20 | Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress | 29 | 86 | 233 | 500 | Nonce verification recommended | ||
| #21 | Melapress Login Security | 31 | 69 | 278 | 2k+ | Non-prefixed global variable | ||
| #22 | Theme My Login | 32 | 251 | 549 | 60k+ | Non-prefixed function | ||
| #23 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | Dynamic hook name | ||
| #24 | wpDirAuth | 32 | 250 | 135 | 500 | wp function not compatible with requires wp | ||
| #25 | Easy Upload Files During Checkout | 33 | 218 | 199 | 500 | Unsafe printing function | ||
| #26 | پینوا | Pinova | 33 | 171 | 75 | 300 | Output is not escaped | ||
| #27 | Rename wp-login.php to anything you want | 33 | 251 | 117 | 500 | Output is not escaped | ||
| #28 | Sessions | 33 | 196 | 103 | 900 | Output is not escaped | ||
| #29 | Login with Vipps and MobilePay | 34 | 263 | 174 | 900 | Output is not escaped | ||
| #30 | Auto Login for Sakura Rental Server | 35 | 3 | 3 | 10k+ | Hidden files included | ||
| #31 | Change Username | 35 | 7 | 10 | 4k+ | Direct Query | ||
| #32 | Expire User Passwords | 35 | 3 | 15 | 3k+ | Nonce verification recommended | ||
| #33 | Force Email Login | 35 | 5 | 0 | 800 | Hidden files included | ||
| #34 | Frontend Reset Password | 35 | 83 | 128 | 10k+ | Text Domain Mismatch | ||
| #35 | IP Based Login | 35 | 179 | 146 | 600 | Output is not escaped | ||
| #36 | Login-Logout | 35 | 104 | 8 | 3k+ | Output is not escaped | ||
| #37 | Magic Login – Passwordless Authentication for WordPress – Login Without Password | 35 | 23 | 53 | 3k+ | Missing nonce verification | ||
| #38 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | wp function not compatible with requires wp | ||
| #39 | Security Optimizer – The All-In-One Protection Plugin | 35 | 40 | 86 | 1m+ | Input is not sanitized | ||
| #40 | Login as User | 36 | 101 | 64 | 30k+ | Output is not escaped | ||
| #41 | Duo Two-Factor Authentication | 37 | 44 | 61 | 3k+ | Missing nonce verification | ||
| #42 | Persistent Login | 37 | 338 | 108 | 6k+ | Unsafe printing function | ||
| #43 | ReCaptcha Integration for WordPress | 37 | 60 | 66 | 9k+ | Output is not escaped | ||
| #44 | Autologin Links | 38 | 73 | 74 | 8k+ | Output is not escaped | ||
| #45 | Erident Custom Login and Dashboard | 38 | 122 | 28 | 8k+ | Unsafe printing function | ||
| #46 | Simple LDAP Login | 38 | 65 | 33 | 1k+ | Output is not escaped | ||
| #47 | Sidebar Login Widget | 38 | 90 | 16 | 700 | Output is not escaped | ||
| #48 | SimpleModal Login | 39 | 50 | 12 | 800 | Unsafe printing function | ||
| #49 | Slash Admin | 39 | 116 | 38 | 500 | Output is not escaped | ||
| #50 | WP Limit Login Attempts | 39 | 26 | 67 | 10k+ | Direct Query |
