FluentAuth – The Ultimate Authorization & Security Plugin for WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 85% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ r0sc0

   2mo ago

   This is a great plugin. Even better has been the support I have received from the team.

   Read on wp.org ↗
2. ★★★★★ richard0508

   3mo ago

   There is no way to customize the login and registration fields. Even when using the provided shortcuts, these pages still cannot be customized as needed. The documentation is so brief that it is difficult to find any truly useful information. After integrating Google Sign-In and Google Registration, users who register with a Google account get stuck on the login page and are never redirected, making the registration process unusable. FluentAuth customer service team didn’t solve my problem at all. They spent two whole weeks repeatedly telling me that I was just stuck on the login issue, which was a complete waste of my time. In the end, I had to fix it myself. The actual issue was that after completing the registration, the page cache got completely stuck and failed to pass the data to the account login. This caused an infinite loop on the login page, making it absolutely impossible to log in. This is clearly a flaw in your system’s design and has absolutely nothing to do with any third-party plugins. This topic was modified 4 weeks, 1 day ago by richard0508.

   Read on wp.org ↗
3. ★★★★★ DeepBlue

   4mo ago

   Fluent Auth / Fluent Security is a nice security plugin with all the most important security features, but without the unecessary and the bloat

   Read on wp.org ↗
4. ★★★★★ gfa7

   5mo ago

   Got superior support for resolving a conflict and finding issues in somebody else’s code. Thanks again!

   Read on wp.org ↗
5. ★★★★★ unknowncreative

   9mo ago

   Over all it works and does a dam good jobonly current complaint/bug, is that login with google still requires a code to be sent and entered.Hope to see this plugin for years and years to come

   Read on wp.org ↗
6. ★★★★★ zchas42

   10mo ago

   I wanted to implement a login system with the requirement for users to enter an email code on login. This mitigates login sharing among users. Very effective, did the job perfectly. Raised one support ticket query which was responded to with a “right first time” solution within 24 hours. Very happy.

   Read on wp.org ↗
7. ★★★★★ Manni02

   12mo ago

   I had been using Theme-My-Login for many years, including after it became paid-for, but it had many compatibility issues and support wasn’t always worth the yearly license fee, so I started looking at other options. I’m a huge fan of Fluent plugins, and I gave a try to FluentPlugins 2.0, as it provided the improvements I was looking for: customizable login and register forms, login redirects, customization of system emails and a few other features that made it a much stronger alternative than its V1.0 (which I had looked at but wasn’t advanced enough for my use). V2.0 is free, it works great, it allowed me to replace Theme-My-Login and a few other plugins, and it’s both light and compatible with all my installed plugins. It also works seamlessly with all the other plugins from the fluent family, which I highly recommend as well, both in their free and paid-for versions. Support is great, as always. A cosmetic issue I had is about to be resolved in the next release and I was provided a .css early to resolve it without having to wait for this upcoming release. The main downside for me is that the magic login feature doesn’t work for our website. I reported the issue and I hope it will be solved at some point in the future. Fluent support has offered to look at our website, as it’s not a general issue, but unfortunately for various reasons we can’t allow third party access. This issue would probably have been resolved by support, had this been possible. One last issue is that the login redirect feature doesn’t work in our website, but I use Uncanny Toolkit for this, so it’s not a huge problem. Regarding missing features, I would like Fluent Security to offer simultaneous login protection, similar to what’s offered by the excellent Loggedin plugin, as it would be really useful for membership sites. This feature request is noted, so I hope it will be implemented at some point, but in the meantime the two plugins work fine together, along with the additional security offered by Wordfence. Overall, I’m very happy with the plugin, and highly recommended. I only hope that a few issues will be fixed and features implemented so that I can get rid of a few more plugins. This is the only reason why I didn’t give it 5 stars. I’ll revise this review when/if some of the features mentioned above are implemented.

   Read on wp.org ↗
8. ★★★★★ Michael Maguire

   1.0y ago

   A very useful plugin and also free.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.1.2 Hardened Security Scan and Settings endpoints with stricter input validation and sanitization Sanitized social auth redirect cookie to prevent storing untrusted values Added client token verification in Google One-Tap lo 2.1.2
2. — Version 2.1.1 Introducing One-Tap Login via Google Social Auth Connection Improved Translation & Localization Security: Improved Data Security and Sanitization and compitable with latest WordPress security standards Bug Fixes and Perf 2.1.1
3. — Version 2.0.3 Typo and Smartcode fixed on Custom Emails WP_Error Notice fixed 2.0.3
4. — Version 2.0.2 Fixed: Login Redirect Issue Fixed Typo on Admin Menu Fixed Styling Issues 2.0.2
5. — Version 2.0.0 Introduing Login/Signup Page Customizer Added Login with Facebook Added Syststem Emails Custimizations Introducing WordPress Core Files Integrity Check Configurable: One-Click Login via Email as primary login method UI & 2.0.0
6. — Version 1.1.0 Added hooks for 3rd party developers Improvement on Authentication flow 1.1.0

2 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode ↗
   2025-12-15 CVE-2025-13728 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.3 Patched in 2.1.0
2. Medium · 6.5 FluentAuth <= 1.0.1 - IP Spoofing to Protection Mechanism Bypass ↗
   2022-12-27 CVE-2022-4746 Use of Less Trusted Source Affects <= 1.0.1 Patched in 1.0.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 12 languages, 2 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-10-11 9K+ → 10K+ up after 74 days in tier
2. 2025-07-29 8K+ → 9K+ up after 3 days in tier
3. 2025-07-26 9K+ → 8K+ down after 4 days in tier
4. 2025-07-22 8K+ → 9K+ up after 83 days in tier
5. 2025-04-30 7K+ → 8K+ up after 107 days in tier
6. 2025-01-13 6K+ → 7K+ up after 5 days in tier
7. 2025-01-08 7K+ → 6K+ down after 2 days in tier
8. 2025-01-06 6K+ → 7K+ up after 3 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Disable XML-RPC Pingback 60K+ installs · 3.9★ · 1 shared tag B
• Remove & Disable XML-RPC Pingback 8K+ installs · 3.6★ · 1 shared tag D
• Loggedin – Session Manager, Limit Concurrent Logins & Force Logout 8K+ installs · 4.8★ · 1 shared tag A
• Avatar Manager 5K+ installs · 4.6★ · 1 shared tag D
• Remove XML-RPC Methods 1K+ installs · 4.1★ · 1 shared tag B
• C Control XML-RPC publishing 400+ installs · 4.1★ · 1 shared tag D

Embed this report card

Drop a live Pulse card for FluentAuth – The Ultimate Authorization & Security Plugin for WordPress into a readme, a review or a deck. It updates itself.

FluentAuth – The Ultimate Authorization & Security Plugin for WordPress: 10K+ active installs, 4.0★ (30 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/fluent-security