Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 67% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ Quaint & Fabled

   4.4y ago

   After one of my sites got hacked a few years ago, I installed this plug-in on all my WordPress accounts to try to prevent it from happening again. For the first few months I got almost daily attack reports but now it’s down to just a handful each year (I can’t imagine how many IPs must be on my block list by now). Thank you! 😀

   Read on wp.org ↗
2. ★★★★★ fabiomalf

   8.6y ago

   Tutto perfetto, evita che vi siano ripetuti tentativi di login. Molto configurabile, invia notifiche.

   Read on wp.org ↗
3. ★★★★★ Krzysztof

   8.8y ago

   He fulfills his task. I am happy with it. Thanks 🙂 Limit Attempts by BestWebSoft

   Read on wp.org ↗
4. ★★★★★ hepae002

   8.8y ago

   That˚s what I needed for my work. Great. Thanks.

   Read on wp.org ↗
5. ★★★★★ MOTWGUY

   9.3y ago

   I’ve been using this plugin for a couple of years and been very happy with the results. I have Securi installed and it was constantly emailing me about failed login attempts until I installed this.

   Read on wp.org ↗
6. ★★★★★ ikal

   9.5y ago

   Install this plug-in now, pokoke apiklah

   Read on wp.org ↗
7. ★★★★★ vitmalot

   9.8y ago

   Pracuje perfektně

   Read on wp.org ↗
8. ★★★★★ asiemssen

   9.8y ago

   I use the plugin since one year and it helps me great to keep my WP clean. Now, after one year I’ve a little problem but the suppport helped me out within 3 hours! Great!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.2 Update : BWS panel section was updated. Update : All functionality was updated for WordPress 6.8.2. New: Limit Attempts export/import was added. Bugfix : Fixed small bags. 3.2
2. — Version 3.1 Update : Security fixes. Update : BWS panel section was updated. Update : All functionality was updated for WordPress 6.5. 3.1
3. — Version 3.0 Update : All functionality was updated for WordPress 6.4. Update : BWS panel section was updated. Pro: Limit Attempts Captcha for default forms was added. Bugfix : Database queries have been optimized. 3.0
4. — Version 2.9 Pro : Email priority Deny and Allow lists issue has been fixed. Bugfix : The issue with displaying pagination on tables has been fixed. Update : Adding items to Deny and Allow lists has been moved to a separate page. Upd 2.9
5. — Version 2.8 Bugfix : Database queries have been optimized. Update : BWS Panel section was updated. Update : Blacklist and whitelist replaced with deny list and allow list. 2.8
6. — Version 2.7 NEW : Ability to block emails sent from certain email address via Contact Form by BestWebSoft was added. Bugfix : Fixed small bags. Update : BWS panel section was updated. 2.7

3 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.1 Limit Attempts by BestWebSoft <= 1.2.9 - Reflected Cross-Site Scripting ↗
   2024-03-28 CVE-2024-30439 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.2.9 Patched in 1.3.0
2. Medium · 6.1 Limit Attempts by BestWebSoft < 1.1.8 - Reflected Cross-Site Scripting ↗
   2017-04-12 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.1.8 Patched in 1.1.8
3. Critical · 9.8 Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms < 1.1.1 - SQL Injection ↗
   2015-10-09 CVE-2015-9335 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.1.1 Patched in 1.1.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 107 languages, 1 at 90% or more

Plus 83 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-07-14 5K+ → 4K+ down after 8 days in tier
2. 2025-07-06 4K+ → 5K+ up after 1 days in tier
3. 2025-07-05 5K+ → 4K+ down after 171 days in tier
4. 2025-01-15 6K+ → 5K+ down after 377 days in tier
5. 2024-01-04 7K+ → 6K+ down after 206 days in tier
6. 2023-06-12 8K+ → 7K+ down after 219 days in tier
7. 2022-11-05 9K+ → 8K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Loginizer 1M+ installs · 4.8★ · 2 shared tags A
• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 2 shared tags A
• L Limit Login Attempts 300K+ installs · 4.6★ · 2 shared tags D
• WPS Limit Login 100K+ installs · 4.8★ · 2 shared tags A
• WP Ghost (Hide My WP Ghost) – Security & Firewall 100K+ installs · 4.5★ · 2 shared tags A
• WP fail2ban – Advanced Security 60K+ installs · 4.1★ · 2 shared tags C

Embed this report card

Drop a live Pulse card for Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms into a readme, a review or a deck. It updates itself.

Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms: 4K+ active installs, 4.6★ (37 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/limit-attempts