NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ andrebell82

   2mo ago

   A major plus is it does not crash my site like other firewalls have done. Not even once.But the current logging is somewhat impractical. I have been hit with thousands of bot attacks and cannot see all of the activity nor all of the cycled IP addresses they were using, since the log only shows the 1500 most recent lines, not the older stuff too. The log says: “Note: your log has 13738 lines. I will display the last 1500 lines only.”The logs need a sorting option to show the most recent entries first plus an export feature of all activity to be of use in the real world. Cannot rely solely on the logs to know what attacks were taking place, since can only see a snapshot of what was going on :/Is not a bad product. Just needs more of the features available in other firewalls. As things stand, I have no idea what the other 12,238 attacks were that got blocked. This topic was modified 3 weeks, 5 days ago by andrebell82.

   Read on wp.org ↗
2. ★★★★★ mschwehla

   5mo ago

   Some years ago I installed Ninja Firewall for WP after a defacement attack and haven’t experienced a single successful intrusion since. It’s a basic feature for keeping the website clean.

   Read on wp.org ↗
3. ★★★★★ Mihail Bogatov

   5mo ago

   One of THE MOST useful (and free!) plugins out there. Saved my websites many times. I use it always in full WAF mode, so it blocks malicious bots and queries even before they exhaust server resources. The dev is very responsive and professional. Bought a license to one of my websites to support the development. THANK YOU!

   Read on wp.org ↗
4. ★★★★★ Vu Tru So

   7mo ago

   Thank you for creating a great plugin

   Read on wp.org ↗
5. ★★★★★ CPX

   8mo ago

   This plugin is fantastic! A proper web application firewall for WordPress, once set up correctly. Been testing it for the last two years without any problems whatsoever. Great work, guys!

   Read on wp.org ↗
6. ★★★★★ demuis

   11mo ago

   After experiencing a massive infection on a WordPress site, I started using this plugin. Since then, I haven’t had any infections at all. I am very satisfied with it, and it’s now in use on over 50 sites. Many thanks!

   Read on wp.org ↗
7. ★★★★★ hybridcopywriter

   11mo ago

   Works well. And you can see the threats, or should I say attempts to gain nefarious access to your site. Well done guys. Keep up the good work.

   Read on wp.org ↗
8. ★★★★★ domzub

   1.1y ago

   I used to use Wordfence, but I had ongoing performance issues on my site. After switching to NinjaFirewall, I immediately noticed the difference. it’s fast, lightweight, and very easy to set up. It does its job without slowing down. Highly recommended.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.8.8 Because WordPress.org enforces a mandatory 24-hour update delay on all new plugin releases, as soon as a new security updates is available for a plugin, NinjaFirewall will allow you to update it immediately from the “Plu 4.8.8
2. — Version 4.8.7 Fixed a PHP warning in File Check. Fixed a potential “Allowed memory size exhausted” error. Several small fixes and adjustments under the hood. WP+ Edition (Premium): Updates Stripe and Airwallex webhook notification IP 4.8.7
3. — Version 4.8.6 Many small fixes and adjustments to make NinjaFirewall better. Renamed/standardised all filenames to improve project readability and maintainability. Errors occurring during the firewall activation will be displayed with 4.8.6
4. — Version 4.8.5 Behind-the-scenes update: All the code dealing with exporting, importing and restoring the configuration was rewritten. WP+ Edition (Premium): You can import/export the configuration from WP-CLI. See $ wp ninjafirewall h 4.8.5
5. — Version 4.8.4 Behind-the-scenes update: All the code dealing with the firewall log and IP address checks has been rewritten, bugs were resolved and several small fixes were added to make NinjaFirewall better. WP+ Edition (Premium): Up 4.8.4
6. — Version 4.8.3 When running in “Full WAF mode”, NinjaFirewall will automatically detect if the SQL database is listening on IPv6. WP+ Edition (Premium): Updated IP location databases. WP+ Edition (Premium): updated the whitelist of web 4.8.3

1 disclosed vulnerability on record for this plugin, fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.6 NinjaFirewall <= 4.3.3 - Authenticated PHAR Deserialization ↗
   2021-05-30 CVE-2021-4451 Deserialization of Untrusted Data Affects < 4.3.4 Patched in 4.3.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 115 languages, 3 at 90% or more

Plus 91 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-06-27 90K+ → 100K+ up after 169 days in tier
2. 2023-01-09 80K+ → 90K+ up after 1 days in tier
3. 2023-01-08 90K+ → 80K+ down after 2 days in tier
4. 2023-01-06 80K+ → 90K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• NinjaScanner – Virus & Malware scan 30K+ installs · 4.1★ · 4 shared tags B
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 3 shared tags A
• Sucuri Security – Auditing, Malware Scanner and Security Hardening 600K+ installs · 4.2★ · 3 shared tags A
• Defender Security – Malware Scanner, Login Security & Firewall 80K+ installs · 4.8★ · 3 shared tags A
• Security Plugin, Firewall & Malware Scanner with Auto Removal 40K+ installs · 4.7★ · 3 shared tags A
• Zero Spam for WordPress 20K+ installs · 4.1★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall into a readme, a review or a deck. It updates itself.

NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall: 100K+ active installs, 4.9★ (220 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/ninjafirewall