API Bearer Auth

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ Andrey

   5.0y ago

   Thanx

   Read on wp.org ↗
2. ★★★★★ rrr3da

   5.4y ago

   We choose this plugin wrt the more popular alternatives to make use of the refresh token endpoint. Easy to setup, work as expected.. flawlessly! Wordpress version: 5.7, PHP 7.4 Thank you This topic was modified 5 years, 3 months ago by rrr3da.

   Read on wp.org ↗
3. ★★★★★ akaydavid

   6.2y ago

   Thanks for this plugin & for enhancing wordpress with more long-awaited developer tools. God bless you real good.

   Read on wp.org ↗
4. ★★★★★ Son Do

   6.3y ago

   I love how simple the plugin is. Just need to install, read docs and follow in 5 mins. Thank you!

   Read on wp.org ↗
5. ★★★★★ EvdHeuvel

   6.4y ago

   Nice and simple!

   Read on wp.org ↗
6. ★★★★★ Sotiris Katsaniotis

   6.5y ago

   The plugin is refreshingly simple in its purpose and it does it perfectly. I could use it to login and use my API via JWT Auth in seconds! Thanks!

   Read on wp.org ↗

1 disclosed vulnerability on record for this plugin, fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.1 API Bearer Auth < 20190907 - Cross-Site Scripting ↗
   2019-09-05 CVE-2019-16332 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 20190907 Patched in 20190907

Automated install-time checks, tested on PHP 7.4.8 · WP 5.5.1

Translated into 1 language, 0 at 90% or more · development strings

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-11 200+ → 300+ up after 12 days in tier
2. 2026-06-29 300+ → 200+ down after 8 days in tier
3. 2026-06-21 200+ → 300+ up after 1 days in tier
4. 2026-06-20 300+ → 200+ down after 24 days in tier
5. 2026-05-27 200+ → 300+ up after 1 days in tier
6. 2026-05-26 300+ → 200+ down after 3 days in tier
7. 2026-05-23 200+ → 300+ up after 1 days in tier
8. 2026-05-22 300+ → 200+ down after 437 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Sticklight 200+ installs · 3.6★ · 3 shared tags B
• Simple REST API Authenticaton with WooCommerce Credentials 60+ installs · 4.0★ · 3 shared tags B
• Disable REST API 80K+ installs · 4.6★ · 2 shared tags D
• Make Connector 80K+ installs · 3.1★ · 2 shared tags B
• JWT Authentication for WP REST API 60K+ installs · 4.3★ · 2 shared tags B
• Disable WP REST API 30K+ installs · 4.6★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for API Bearer Auth into a readme, a review or a deck. It updates itself.

API Bearer Auth: 300+ active installs, 5.0★ (6 reviews). Plugin Pulse (WP Mayor), as of 2026-08-31. https://plugins.wpmayor.com/plugin/api-bearer-auth