DoLogin Security

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

Reviewers keep calling it lightweight and effective for brute force protection, passwordless logins and 2FA, though a couple report 2FA or SMS auth breaking and support threads going unanswered.

1. ★★★★★ João Portugal

   2.4y ago

   Extremely functional without extras or ads. Please keep giving us updates.

   Read on wp.org ↗
2. ★★★★★ Qiannah Update Media

   3.2y ago

   this plugin works very well

   Read on wp.org ↗
3. ★★★★★ sergialarconrecio

   3.6y ago

   The Verify 2FA options and the SMS Auth have stopped working, that’s why I only give it two stars. I wait for a solution or if not I do not recommend anyone to install the plugin. This topic was modified 3 years, 5 months ago by sergialarconrecio.

   Read on wp.org ↗
4. ★★★★★ techtone

   3.6y ago

   Passwordless login link option is simply amazing. Love this plugin.

   Read on wp.org ↗
5. ★★★★★ Louis Stanford

   3.9y ago

   This is a lightweight plugin that should be first on your list. One request tho: would be nice to see a distinction made between successful logins, and unsuccessful logins and blocked logins.

   Read on wp.org ↗
6. ★★★★★ Marios

   5.0y ago

   This plugin saved me multiple times from brute force attacks.

   Read on wp.org ↗
7. ★★★★★ ads

   5.1y ago

   Great plugin and solid contributors regularly keeping it up to date. It has 2FA, Google recaptcha and integrates with Google Authenticator This topic was modified 4 years, 10 months ago by ads. This topic was modified 4 years, 10 months ago by ads. This topic was modified 3 years, 9 months ago by ads.

   Read on wp.org ↗
8. ★★★★★ matteocuellar

   5.1y ago

   We’ve been having issues with the plugin causing an error which puts the site into maintenance mode on multiple WP deployments. The plugin developers haven’t responded to the support threads and there hasn’t been any plugin update in 5 months. Assuming it’s been abandoned.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.7.7 🍀 Made the login-page KeyLockr sign-in start on demand with clear DoLogin branding and a KeyLockr reference link, instead of opening a connection on every login-page visit. 🔐 Protected passwordless and site-connection 4.7.7
2. — Version 4.4 🐞 Security: Fixed an authentication bypass via insufficient randomness in passwordless and site-connection login tokens (CVE-2026-14495). Login tokens and SMS codes are now generated with a cryptographically secure rand 4.4
3. — Version 4.3 Generating passwordless link will redirect to the corresponding tab now. 4.3
4. — Version 4.2 🍀 Cloudflare Turnstile reCAPTCHA. 🐞 Fixed 2FA conflict w/ reCAPTCHA. 4.2
5. — Version 4.1.1 Resolved WooCommerce HPOS feature warning. 4.1.1
6. — Version 4.1 Showed the easy login confirmation landing page. Disallowed reuse of login link to prevent possible replay attack. Fixed root site pk/sk clear issue in easy login when saving conf. Restored reCAPTCHA to previous version. 4.1

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.8 DoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token ↗
   2026-07-07 CVE-2026-14495 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Affects <= 4.3 Patched in 4.4
2. Medium · 6.5 DoLogin Security <= 3.7.1 - Missing Authorization via REST Endpoints ↗
   2023-10-24 CVE-2023-46608 Missing Authorization Affects <= 3.7.1 Patched in 3.8
3. Medium · 4.3 DoLogin Security <= 3.7 - Missing Authorization on Dashboard Widget ↗
   2023-09-14 CVE-2023-4800 Missing Authorization Affects < 3.7.1 Patched in 3.7.1
4. High · 7.2 DoLogin Security <= 3.6 - Unauthenticated Stored Cross-Site Scripting ↗
   2023-08-28 CVE-2023-4549 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6 Patched in 3.7
5. Medium · 5.3 DoLogin Security <= 3.6 - IP Address Spoofing ↗
   2023-08-21 CVE-2023-4631 Use of Less Trusted Source Affects < 3.7 Patched in 3.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 4 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-12 6K+ → 7K+ up after 8 days in tier
2. 2026-01-04 7K+ → 6K+ down after 2 days in tier
3. 2026-01-02 6K+ → 7K+ up after 255 days in tier
4. 2025-04-22 5K+ → 6K+ up after 248 days in tier
5. 2024-08-17 4K+ → 5K+ up after 174 days in tier
6. 2024-02-25 3K+ → 4K+ up after 446 days in tier
7. 2022-12-06 2K+ → 3K+ up after 1 days in tier
8. 2022-12-05 3K+ → 2K+ down after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Melapress Login Security 2K+ installs · 4.4★ · 2 shared tags A
• Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection 30+ installs · 4.2★ · 2 shared tags A
• Secure Admin Access 10+ installs · 3.6★ · 2 shared tags D
• LoginBerry – 2FA, Passwordless & Email Verification — installs · 3.6★ · 2 shared tags B
• Brute Force Protector — installs · 3.6★ · 2 shared tags B
• C CubeMage Login Guard — installs · 3.6★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for DoLogin Security into a readme, a review or a deck. It updates itself.

DoLogin Security: 7K+ active installs, 4.5★ (13 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/dologin