IP Based Login

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 89% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

At the current install trend, crossing 600+ in roughly 74 days.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ vansnaa

   2.1y ago

   Excellent and unique plugin, works perfectly. I use it in combination with simple-membership plugin. Support (even for free version) is the best there is. Many many thanks to Brijesh Kothari!

   Read on wp.org ↗
2. ★★★★★ gwone

   2.2y ago

   Hello! This plugin has been doing just what we needed for a few years now (allowing subscribers to access their resources while accessing our site from their institution’s IP range – without the need for handing out additional passwords.) We recently had configuration change that created some IPv6 issues that we couldn’t figure out. The developer responded very quickly, analyzed the issue, and worked with us until it was resolved. Fantastic! I’ve worked with a variety of WordPress setups and numerous 3rd party plugins over the last decade. This might be the best support experience I’ve ever encountered. Big thanks!

   Read on wp.org ↗
3. ★★★★★ Christoph Letmaier

   3.1y ago

   Nice, plugin, do exactly what i want. However, i tested it with my ip-address and a non admin account. Result: i can’t logout anymore, because after log out page reload i am logged in again. I wasn’t able to relogin as administrator. I had do delete the login entry manually in the wordpress database (thanks for putting the plugin settings in an extra table). You should implement this function: a user should be able to log out himself, and this should be stored in a cookie. In this way, a normal login vie ../wp-admin would be possible again.

   Read on wp.org ↗
4. ★★★★★ David Perez

   3.4y ago

   Amazing job done for this plugin. Thanks!

   Read on wp.org ↗
5. ★★★★★ mrushhcm

   4.3y ago

   This plugin works well for what we need it to do. When running into an issue with one of the features, they provided support promptly and were very helpful in resolving the issue. This topic was modified 4 years, 2 months ago by mrushhcm.

   Read on wp.org ↗
6. ★★★★★ colnago1

   4.6y ago

   a unique plugin that saves time on authorization and preserves privacy

   Read on wp.org ↗
7. ★★★★★ svenkk

   4.6y ago

   The plugin does exactly what it is supposed to (although you have to set your cache appropriately). On top of that, the support is quick, competent and friendly. No reason for criticism.

   Read on wp.org ↗
8. ★★★★★ Vondelphia.com

   4.9y ago

   Decent plugin but still has some more work to until it’s a 5-star

   Read on wp.org ↗

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.4 IP Based Login <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-09-22 CVE-2025-58960 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.3 Patched in 2.4.4
2. Medium · 4.4 IP Based Login <= 2.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-06-19 CVE-2025-50016 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.2 Patched in 2.4.3
3. Medium · 4.4 IP Based Login <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-03-06 CVE-2024-12800 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.0 Patched in 2.4.1
4. Medium · 4.3 IP Based Login <= 2.4.0 - Cross-Site Request forgery to Log Deletion ↗
   2025-03-06 CVE-2024-13118 Cross-Site Request Forgery (CSRF) Affects <= 2.4.0 Patched in 2.4.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 4 languages, 3 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-27 600+ → 500+ down after 1 days in tier
2. 2026-08-26 500+ → 600+ up after 3 days in tier
3. 2026-08-23 600+ → 500+ down after 107 days in tier
4. 2026-05-08 500+ → 600+ up after 7 days in tier
5. 2026-05-01 400+ → 500+ up after 40 days in tier
6. 2026-03-22 500+ → 400+ down after 2 days in tier
7. 2026-03-20 400+ → 500+ up after 2 days in tier
8. 2026-03-18 500+ → 400+ down after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• L Limit Login Attempts 300K+ installs · 4.6★ · 2 shared tags D
• WPS Limit Login 100K+ installs · 4.8★ · 2 shared tags A
• WP-Members Membership Plugin 50K+ installs · 4.6★ · 2 shared tags A
• Google Authenticator 20K+ installs · 4.3★ · 2 shared tags A
• WP Limit Login Attempts 10K+ installs · 4.6★ · 2 shared tags A
• Login for Google Apps 10K+ installs · 4.5★ · 2 shared tags C

Embed this report card

Drop a live Pulse card for IP Based Login into a readme, a review or a deck. It updates itself.

IP Based Login: 500+ active installs, 4.9★ (23 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/ip-based-login