BulletProof Security

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 46% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ andrey232525

   6mo ago

   По крайней мере проблем никаких не возникало

   Read on wp.org ↗
2. ★★★★★ lorybart

   1.1y ago

   Very fast!

   Read on wp.org ↗
3. ★★★★★ Niresh Shrestha

   1.2y ago

   Confusion fields. The plugin is good but even for the pro members they do not have dedicated support. We have to depend upon the forum. No good support at all. Frustrating.

   Read on wp.org ↗
4. ★★★★★ elanaborth

   1.3y ago

   Excellent plugin makes me feel safe that my site is protected

   Read on wp.org ↗
5. ★★★★★ ccal0088

   1.3y ago

   This plugin saved me a ton of time when our site got hacked. I’m not an IT pro in any sense, but I was able to get a backup file restored and this plugin keep the hackers from re-accessing the site as they had done previously.

   Read on wp.org ↗
6. ★★★★★ afgsistemas

   1.4y ago

   Es muy seguro y me ha funcionado muy bien para proteger mis sitios WordPress… lo recomiendo mucho!

   Read on wp.org ↗
7. ★★★★★ Ocala Website Designs

   1.5y ago

   I used to use 3 security plugins, now I just use this one on all my sites that I create for my clients. Once you get to know it, it works great.

   Read on wp.org ↗
8. ★★★★★ chrisnoble

   1.6y ago

   Never had a problem with compatibilities until I moved to using updraftplus for backups. You could backup manually, but the scheduling wouldn’t work. Paused BulletProof Security and all OK again, which is obviously a shame. Other than that, great plugin.

   Read on wp.org ↗

12 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 BulletProof Security <= 6.9 - Unauthenticated Sensitive Information Exposure ↗
   2026-01-06 CVE-2025-67931 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 6.9 Patched in 7.0
2. Medium · 6.1 BulletProof Security <= 6.0 - Stored Cross-Site Scripting ↗
   2022-04-19 CVE-2022-1265 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 6.1 Patched in 6.1
3. Medium · 5.5 BulletProof Security <= 5.7 - Admin+ Stored Cross-Site Scripting ↗
   2022-02-22 CVE-2022-0590 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 5.8 Patched in 5.8
4. Medium · 5.3 BulletProof Security <= 5.1 - Sensitive Information Disclosure ↗
   2021-09-16 CVE-2021-39327 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 5.1 Patched in 5.2
5. Medium · 6.4 BulletProof Security <= .53.3 - Authenticated Cross-Site Scripting ↗
   2016-05-11 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < .53.4 Patched in .53.4
6. High · 7.2 BulletProof Security <= .53.2 - Cross-Site Scripting ↗
   2016-03-17 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= .53.2 Patched in .53.3
7. Medium · 5.4 BulletProof Security < .51.1 - Cross-Site Scripting ↗
   2014-11-05 CVE-2014-7958 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < .51.1 Patched in .51.1
8. Medium · 4.3 BulletProof Security < .51.1 - Server-Side Request Forgery ↗
   2014-11-05 CVE-2014-8749 Server-Side Request Forgery (SSRF) Affects <= .51 Patched in .51.1
9. High · 8.8 BulletProof Security < .51.1 - SQL Injection ↗
   2014-10-07 CVE-2014-7959 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < .51.1 Patched in .51.1
10. Medium · 4.8 BulletProof Security < .52.5 - Cross-Site Scripting ↗
    2014-09-30 CVE-2015-9230 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < .52.5 Patched in .52.5
11. Medium · 6.1 BulletProof Security <= .48.9 - Cross-Site Scripting ↗
    2014-08-01 CVE-2013-3487 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= .48.9 Patched in .49
12. Medium · 6.1 BulletProof Security < .47.1 - Reflected Cross-Site Scripting ↗
    2012-05-11 CVE-2012-4268 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < .47.1 Patched in .47.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 28 languages, 1 at 90% or more

Plus 4 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-27 30K+ → 20K+ down after 2 days in tier
2. 2026-04-25 20K+ → 30K+ up after 1 days in tier
3. 2026-04-24 30K+ → 20K+ down after 688 days in tier
4. 2024-06-05 40K+ → 30K+ down after 2 days in tier
5. 2024-06-03 30K+ → 40K+ up after 2 days in tier
6. 2024-06-01 40K+ → 30K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Defender Security – Malware Scanner, Login Security & Firewall 80K+ installs · 4.8★ · 4 shared tags A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 3 shared tags A
• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 3 shared tags A
• All-In-One Security (AIOS) – Security and Firewall 1M+ installs · 4.7★ · 3 shared tags A
• BBQ Firewall – Fast & Powerful Firewall Security 100K+ installs · 4.9★ · 3 shared tags A
• RSFirewall! 4K+ installs · 4.2★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for BulletProof Security into a readme, a review or a deck. It updates itself.

BulletProof Security: 20K+ active installs, 4.8★ (674 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/bulletproof-security