Login With Ajax – Fast Logins, 2FA, Redirects

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 48% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ shayno90

   1.1y ago

   As of writing this, July 2025, the plugin works flawlessly. Im using the free version and would happily go premium if/when I need the additional features. Keep it up!

   Read on wp.org ↗
2. ★★★★★ arsforumhelp

   1.8y ago

   Thanks for this great plugin.

   Read on wp.org ↗
3. ★★★★★ Krishna Reddy

   2.1y ago

   Good Plugin. Just what exactly I needed.

   Read on wp.org ↗
4. ★★★★★ alexg54

   2.2y ago

   Works exactly as it says and should

   Read on wp.org ↗
5. ★★★★★ InputCreativitySL

   2.2y ago

   Muy bueno, estupendo.

   Read on wp.org ↗
6. ★★★★★ Roland Beaussant

   2.3y ago

   great!

   Read on wp.org ↗
7. ★★★★★ sman591

   2.4y ago

   Using Version 4.3 and WordPress 6.5.2

   Read on wp.org ↗
8. ★★★★★ Knud

   2.5y ago

   It’s the best login module I’ve ever tried

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.5.1 fixed fatal error in 4.5 when passkeys are enabled 4.5.1
2. — Version 4.5 fixed compatibility issues with passkeys in LWA and LWA Pro due to making passkeys free in LWA 4.4, LWA Pro users need to upgrade to 2.1 for compatibility with passkeys 4.5
3. — Version 4.4 Integrated passkeys into Login With AJAX. Fixed JS errors in 2FA admin. Added 2FA::is_enabled() function. Fixed dismiss admin notice JS errors. Fixed review and promo popup modals to avoid complaints. Updated readme Word 4.4
4. — Version 4.3 fixed incorrect use of path_join() preventing loading templates from the wp-content/plugin-templates/login-with-ajax folder added/fixed modal_button_html overwriting modal button output (only via PHP) added lwa_2FA_befor 4.3
5. — Version 4.2 changed LoginWithAJAX.submit() JS to return a Promise (currently jqXHR) removed dark theme CSS from pixelbones.scss fixed PHP 8.1 warnings added 2FA support fixed minor plugin vulnerability allowing unauthenticated users 4.2
6. — Version 4.1 fixed PHP warnings in PHP 8.x, added lwa_remember_url and lwa_login_url filters, fixed remember/register link urls not getting output properly on the login forms, tweaked default (all) templates to remove template query 4.1

7 disclosed vulnerabilities on record for this plugin, 1 still affects the current version.

1. Medium · 6.4 Login With Ajax – Fast Logins, 2FA, Redirects <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-08-18 CVE-2026-66640 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.5.1 No patch available
2. Medium · 4.3 Login With Ajax <= 4.1 - Cross-Site Request Forgery to Notice Dismissal ↗
   2024-04-10 CVE-2024-30546 Cross-Site Request Forgery (CSRF) Affects <= 4.1 Patched in 4.2
3. Medium · 5.3 Login With Ajax <= 4.1 - Missing Authorization ↗
   2023-12-07 CVE-2023-49859 Missing Authorization Affects <= 4.1 Patched in 4.2
4. Medium · 5.4 Login With Ajax <= 3.1.6 - Cross-Site Scripting ↗
   2017-04-11 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.6 Patched in 3.1.7
5. Medium · 6.3 Login With Ajax < 3.1 - Cross-Site Request Forgery ↗
   2013-05-06 CVE-2013-2707 Cross-Site Request Forgery (CSRF) Affects < 3.1 Patched in 3.1
6. Medium · 6.1 Login With Ajax <= 3.0.4 - Cross-Site Scripting ↗
   2012-05-18 CVE-2012-2759 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.4 Patched in 3.0.4.1
7. Medium · 6.1 Login With Ajax < 3.0.4.1 - Cross-Site Scripting ↗
   2012-05-07 CVE-2012-4283 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.0.4.1 Patched in 3.0.5

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.3

Translated into 70 languages, 2 at 90% or more

Plus 46 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-10 20K+ → 10K+ down after 12 days in tier
2. 2026-05-29 10K+ → 20K+ up after 2 days in tier
3. 2026-05-27 20K+ → 10K+ down after 687 days in tier
4. 2024-07-09 30K+ → 20K+ down after 428 days in tier
5. 2023-05-08 40K+ → 30K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP Hide & Security Enhancer 50K+ installs · 4.3★ · 3 shared tags A
• Security Plugin, Firewall & Malware Scanner with Auto Removal 40K+ installs · 4.7★ · 3 shared tags A
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 2 shared tags A
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 2 shared tags A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 2 shared tags A
• Loginizer 1M+ installs · 4.8★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Login With Ajax – Fast Logins, 2FA, Redirects into a readme, a review or a deck. It updates itself.

Login With Ajax – Fast Logins, 2FA, Redirects: 10K+ active installs, 4.6★ (166 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/login-with-ajax