Loginizer

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Reviewers say Loginizer blocks brute-force login attempts reliably with an easy setup, and the only real gripe is wanting a few more configuration options.

1. ★★★★★ pwhenderson

   2mo ago

   Hadn’t noticed it running in the background on one of my sites. The last couple of months, global hacking of WordPress sites has increased. Loginizer has been emailing me the extra attempts. I suggest everyone change their Username Admin to something else, admin gets the most hack attempts. And change the Loginizer settings, Brute force page, make retries and lockouts last longer, etc.

   Read on wp.org ↗
2. ★★★★★ wardak

   3mo ago

   Thank you so much for this great kind of plugin that you developed Really appreacite your effort.

   Read on wp.org ↗
3. ★★★★★ dadsfam

   4mo ago

   Recommended for beginners – works and is all you need as beginners. Supporting premium if you want full business-like features. Greetings from South Africa. Cheers.

   Read on wp.org ↗
4. ★★★★★ thepvtimes

   4mo ago

   excellent

   Read on wp.org ↗
5. ★★★★★ bot37

   4mo ago

   It has worked well so far.

   Read on wp.org ↗
6. ★★★★★ Luiz Soares

   4mo ago

   Thank you so much for creating yet another essential WordPress tool, and congratulations 🙂

   Read on wp.org ↗
7. ★★★★★ Ben N

   5mo ago

   Took a website I was working on from 30+ failed login attempts daily, to 0.Can’t really argue with that. I’d say that’s job well done.

   Read on wp.org ↗
8. ★★★★★ ronjona6

   5mo ago

   Really helpful plugin for login protection. Easy setup and started working right away. Blocks unwanted attempts and gives peace of mind. using it for a while now, no issues so far. tnkz 👍

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.0.8 [Improvement Pro] Admin slug htaccess rule, now handles the new slug not having / at the end in the URL. [Improvement] When 2FA is enabled, email notifications will be sent only after successful 2FA verification for both 2.0.8
2. — Version 2.0.7 [Improvement Pro] Two Factor Authentication : Enforced 2FA option added for all users. [Improvement Pro] Country Block : Admin users now can see details of the blocked IP(s). [Improvement Pro] Country Block : End user IP 2.0.7
3. — Version 2.0.6 [Bug-Fix] There was an issue with URL decoding, this has been fixed. 2.0.6
4. — Version 2.0.5 [Feature Pro] Country Blocking: Block IPs from specific countries to restrict access to your website. [Improvement Pro] Captcha Compatibility: Added Captcha support for Contact Form 7 and WPForms. [Improvement] Brute For 2.0.5
5. — Version 2.0.4 [Improvement] Loginizer now supports Captcha for Block based WooCommerce checkout. [Improvement] Registration through Social Login now sends registration email, following the WordPress registration flow. [Task] Making Pa 2.0.4
6. — Version 2.0.3 [Improvement Pro] 2FA via Email now supports HTML content type for the content of the email. [Improvement Pro] Added an option to choose the location of Captcha on WooCommerce checkout page. [Improvement Pro] Trunstile c 2.0.3

8 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.1 Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider ↗
   2024-11-04 CVE-2024-10097 Improper Authentication Affects <= 1.9.2 Patched in 1.9.3
2. Medium · 6.1 Loginizer <= 1.7.8 - Reflected Cross-Site Scripting via 'limit_session[count]' ↗
   2023-05-02 CVE-2023-2296 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.8 Patched in 1.7.9
3. Medium · 4.3 Loginizer <= 1.7.5 - Cross-Site Request Forgery ↗
   2022-12-05 CVE-2022-45079 Cross-Site Request Forgery (CSRF) Affects < 1.7.6 Patched in 1.7.6
4. Medium · 6.1 Loginizer <= 1.7.5 - Reflected Cross-Site Scripting via 'name' ↗
   2022-05-12 CVE-2022-45084 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.5 Patched in 1.7.6
5. Critical · 9.8 Loginizer <= 1.6.3 - SQL Injection ↗
   2020-10-21 CVE-2020-27615 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.6.4 Patched in 1.6.4
6. Medium · 6.1 Loginizer 1.3.8-1.3.9 - Unauthenticated Stored Cross-Site Scripting ↗
   2018-05-22 CVE-2018-11366 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 1.3.8 - 1.3.9 Patched in 1.4.0
7. Critical · 9.8 Loginizer <= 1.3.5 - Blind SQL Injection ↗
   2017-08-08 CVE-2017-12650 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.3.6 Patched in 1.3.6
8. High · 8.8 Loginizer <= 1.3.5 - Cross-Site Request Forgery ↗
   2017-08-08 CVE-2017-12651 Cross-Site Request Forgery (CSRF) Affects < 1.3.6 Patched in 1.3.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 19 languages, 6 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 2 shared tags A
• User Role Editor 700K+ installs · 4.5★ · 2 shared tags A
• Admin Menu Editor 300K+ installs · 4.6★ · 2 shared tags A
• L Limit Login Attempts 300K+ installs · 4.6★ · 2 shared tags D
• WPS Limit Login 100K+ installs · 4.8★ · 2 shared tags A
• WP Ghost (Hide My WP Ghost) – Security & Firewall 100K+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Loginizer into a readme, a review or a deck. It updates itself.

Loginizer: 1M+ active installs, 4.8★ (1,030 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/loginizer