Inactive Logout

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 74% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ Emilio Lejit

   7mo ago

   Great and impeccable plugin. Does exactly what’s described. This topic was modified 5 months ago by Emilio Lejit.

   Read on wp.org ↗
2. ★★★★★ pilantra42

   2.3y ago

   Super Simple setup, Meets the Need!

   Read on wp.org ↗
3. ★★★★★ TVZ

   3.2y ago

   I was searching for a plugin that does this. I found a couple, but they had very limited functionality Inactive Logout Pro is extraordinary. It has some very unique features that I could not find in any other plugin Browser Close Logout: Nobody remembers to actively log out before closing the browser. Hence, browser close log out is one of the most impressive features in the plugin. There is no other plugin that provides this Maximum number of logins per user: Number of users that can access the same user at the same time. This is awesome if you sell subscriptions with varied plans like Netflix Redirect Logged out users using AJAX: If you are selling courses, just logging the user out in the backend is not useful at all, because the user can just keep watching a course video despite being logged out. This is where AJAX requests come in. The user is actively redirected to another page (even when the user has not refreshed the page) In a nutshell, the best concurrent user security plugin out there. Go for the paid version, you won’t regret it

   Read on wp.org ↗
4. ★★★★★ alfredo49

   3.5y ago

   Perfect plugin!

   Read on wp.org ↗
5. ★★★★★ rupert28

   3.5y ago

   Great plugin, does exactly what it says it does. Looks clean, nicely customisable, thanks a lot!

   Read on wp.org ↗
6. ★★★★★ Jakours2

   3.5y ago

   Very useful… easy to setup. Can’t be better. Add more options with the pro one if you need it. Or donate here… as i’ve made.

   Read on wp.org ↗
7. ★★★★★ Anonymous User 20791862

   3.7y ago

   it works very well. However, if I watch a youtube video (with or without full screen) my session expires. Is it possible to ensure that the session doesn’t expire when I’m playing an audio or video stream?

   Read on wp.org ↗
8. ★★★★★ siup

   3.8y ago

   Finally bought this great plugin! work well great support This topic was modified 3 years, 7 months ago by siup. This topic was modified 3 years, 7 months ago by siup.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.6.2 Version bump for WordPress v7 Support. 3.6.2
2. — Version 3.6.1 Minor Changes. 3.6.1
3. — Version 3.6.0 Fixed stored XSS vulnerability in role-based redirect URL field. Added nonce and capability checks for better CSRF and privilege protection. Sanitized and validated all redirect and custom URL inputs using esc_url_raw() 3.6.0
4. — Version 3.5.5 Fixed: If roles were set in random order role based setting timeout field took the precedence value giving fuzzy results. 3.5.5
5. — Version 3.5.4 Minimum WordPress version is now 6.6. 3.5.4
6. — Version 3.5.3 Added: Toast message turn on and off setting. Changed: Toast message by default is off. 3.5.3

3 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Inactive Logout <= 3.5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2025-10-31 CVE-2025-11922 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.5.5 Patched in 3.6.0
2. Medium · 5.3 Inactive Logout <= 3.2.2 - Missing Authorization ↗
   2023-09-20 CVE-2023-44142 Missing Authorization Affects < 3.2.3 Patched in 3.2.3
3. Medium · 4.3 Inactive Logout <= 3.2.2 - Cross-Site Request Forgery ↗
   2023-09-20 Cross-Site Request Forgery (CSRF) Affects < 3.2.3 Patched in 3.2.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 6 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-05-24 20K+ → 10K+ down after 1 days in tier
2. 2026-05-23 10K+ → 20K+ up after 1 days in tier
3. 2026-05-22 20K+ → 10K+ down after 407 days in tier
4. 2025-04-10 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A
• Hostinger Tools 3M+ installs · 3.6★ · 1 shared tag B
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 1 shared tag A
• Jetpack – WP Security, Backup, Speed, & Growth 3M+ installs · 3.8★ · 1 shared tag A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 1 shared tag A
• Loginizer 1M+ installs · 4.8★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for Inactive Logout into a readme, a review or a deck. It updates itself.

Inactive Logout: 10K+ active installs, 4.7★ (106 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/inactive-logout