Clean Login

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 32% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ anjanphukan

   2mo ago

   I needed a simple plugin for login and logout and this plugin solved my purpose. Most importantly they added the Logout feature on my request and without any delay. Good developers.

   Read on wp.org ↗
2. ★★★★★ grabe

   1.0y ago

   Tried to give a review since a year ago, but my old wordpress account seems to be blocked. I cannot login anymore. Time flies so fast, and I forgot to write a review about this plugin. Now I remembered again as I installed it on another website. It’s simply fast and clean and it works every time! I wish there’s an easy way (admin UI) to add custom user meta fields in this plugin’s frontend edit profile. Anyway, it’s free and I can’t complain. I just wanna thank the developers who made this and released it for free for everyone to use. This is the simpliest and the best plugin for any wp portal with frontend login and user profile management.For anyone who wants to add custom meta fields for this plugin, I wrote a clean wp snippet here for anyone to use. bryanveloso dot com slash /2025/08/22/clean-login-custom-user-meta-fields-wp-snippet/

   Read on wp.org ↗
3. ★★★★★ replied

   2.2y ago

   I tried a number of login registration plugins and became disillusioned when the majority started to ask for payment for what should be the basic roles for forms, ie: payment (Upgrade) if I want to redirect users after login or when registering. Why? I’m not to bothered about drag and drop or ‘Enhancing’ the colour scheme or rounded edges, I just wanted a login/register page and the ability to redirect users to why they were logging in. Maybe you can tell that I’m bothered by this issue with so called login and registration forms by the amount I’m typing to say ‘Thank You’ guys at Clean Login. It not only does what I want it to do, without the cost (Stupid Cost) of other plugins – being free but I can add Google Capture (Also another ‘Expense’ with Some)! Honeypot works fine, plus if I want to code it there’s the CSS option. Disabling access to the admin area for certain roles or all roles that register is a plus and a bonus, password complexity, a notification email to registered users that I can customize and the simple shortcodes to add to any page I want to ceate to call my login/register page, rather than have them done for me which is a pain when you want to unistall a plugin when it starts asking for money for its basic use, why don’t they take their pages with them? Anyway – Thanks again, anyone looking for a simple yet effective plugin and doesn’t want to pay stupid prices for the privilege, I certainly recommend this one. This topic was modified 2 years ago by replied. Reason: Spelling Mistakes

   Read on wp.org ↗
4. ★★★★★ kursoof

   3.3y ago

   How could you forget about ajax? Why reload the page. I even tried to login to your site, and there it opened in a modal window, and after an incorrect input, the page reloads, it looks like a bug. After all, it’s great when you can enter incorrect data and you will be given a message stating that you entered something incorrectly WITHOUT RELOADING. I will give 5 stars when ajax is added.

   Read on wp.org ↗
5. ★★★★★ KJA4U

   3.7y ago

   Simple and does what it claims to, but not easy to be added in the nav menu. I want it to be added and when a login is successful the”Login” phrase gets converted into “Logout”. Otherwise, it’s so useful. Best Regards

   Read on wp.org ↗
6. ★★★★★ mdsalim2003

   4.1y ago

   Login sometimes gives problems, login is critical even after entering correct username and password. please solve this problem

   Read on wp.org ↗
7. ★★★★★ Manuel Canga

   4.3y ago

   He probado este plugin animado por lo bien que me fue otro plugin (First payment date for WooCommerce Subscriptions) de los mismos desarrolladores. Ha sido una gran decisión porque, igual que el plugin mencionado antes, este también me va de maravilla. Fue fácil personalizar el login de la intranet de mi sitio de muchas maneras diferentes que no habría pensado que se podía si no fuera por este plugin. Gracias, Codection!. Estaré pendiente de cuando saquéis más plugins.

   Read on wp.org ↗
8. ★★★★★ Alejandro Stendelis

   4.6y ago

   Fue instalar, configurar los Shortcodes y los formularios se adaptaron a mi theme a la perfección, funciona de maravilla.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.18 New: shortcode [clean-login-logout] — standalone logout link, usable anywhere on the site. Renders only for logged-in users and accepts an optional text attribute to customise the label 1.18
2. — Version 1.17 New: shortcode [clean-login-change-password] — dedicated password change form, ideal as the destination after a password reset link New: password strength meter in [clean-login-change-password] with four animated levels 1.17
3. — Version 1.16.3 SEO: login, register, restore and change-password pages are now automatically marked as noindex, nofollow — compatible with WordPress native robots API, Yoast SEO and RankMath SEO: canonical URL tag added on plugin pages 1.16.3
4. — Version 1.16.2 Fixed: wrong-credentials error message not showing after a failed login. The redirect URL now uses the configured login page directly instead of relying on the HTTP referer, which could be absent or blocked. Added missin 1.16.2
5. — Version 1.16.1 Documentation updated with upgrade notes for breaking changes introduced in 1.16 Upgrade notes for 1.16: Mandatory nonces: Strict nonce verification ( clean_login_wpnonce and cl_nonce ) was added to login and password re 1.16.1
6. — Version 1.16 Security issues fixed Code improvements Hooks renamed 1.16

6 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Clean Login <= 1.15 - Unauthenticated Insecure Direct Object Reference ↗
   2026-06-16 CVE-2026-54184 Authorization Bypass Through User-Controlled Key Affects <= 1.15 Patched in 1.16
2. High · 8.8 Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion ↗
   2024-08-29 CVE-2024-8252 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 1.14.5 Patched in 1.14.6
3. Medium · 6.4 Clean Login <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-01-10 CVE-2022-4838 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.13.6 Patched in 1.13.7
4. Medium · 6.1 Clean Login 1.12.6.3 - Cross-Site Scripting ↗
   2021-08-09 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 1.12.6.3 Patched in 1.12.6.4
5. High · 8.8 Clean Login <= 1.10.3 - Cross-Site Request Forgery ↗
   2020-06-29 CVE-2017-8875 Cross-Site Request Forgery (CSRF) Affects <= 1.10.3 Patched in 1.10.4
6. Medium · 6.1 Clean Login <= 1.5 - Reflected Cross-Site Scripting ↗
   2015-07-27 CVE-2015-9336 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5 Patched in 1.5.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 15 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-09-17 7K+ → 6K+ down after 257 days in tier
2. 2025-01-03 8K+ → 7K+ down after 208 days in tier
3. 2024-06-09 9K+ → 8K+ down after 240 days in tier
4. 2023-10-13 10K+ → 9K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP-Members Membership Plugin 50K+ installs · 4.6★ · 2 shared tags A
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 40K+ installs · 4.7★ · 2 shared tags A
• UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP 20K+ installs · 4.6★ · 2 shared tags A
• Login With Ajax – Fast Logins, 2FA, Redirects 10K+ installs · 4.6★ · 2 shared tags A
• AJAX Login and Registration modal popup + inline form 3K+ installs · 4.6★ · 2 shared tags B
• S Security-Protection 400+ installs · 4.1★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for Clean Login into a readme, a review or a deck. It updates itself.

Clean Login: 6K+ active installs, 4.7★ (143 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/clean-login