PPWP – Password Protect Pages

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 89% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ intelektual

   4mo ago

   Amazed by the support team! Extremely quick and qualified, awesome

   Read on wp.org ↗
2. ★★★★★ liwebguy

   5mo ago

   Timely & helpful support, even on the free version. Great plugin with an extremely helpful development team!

   Read on wp.org ↗
3. ★★★★★ Kindly Thrive Support

   9mo ago

   I need something so simple, just an app that locks all the site but the homepage. $180/year is too much for this simple requirement. They advertise they have more features for free than any competitor, but I did not see anything different than the other password keepers.

   Read on wp.org ↗
4. ★★★★★ vfactoruk

   1.5y ago

   Muhammad and the PPWP team are very helpful we had an issue with caching and anchor tags not working on our website. PPWP investigated the issue immediately and provided us with some custom code snippets to fix the website within 24 hours.

   Read on wp.org ↗
5. ★★★★★ McNitefly

   1.6y ago

   Great Plugin, very cool funcionality & really good support.

   Read on wp.org ↗
6. ★★★★★ sbdesh

   1.6y ago

   I am extremely happy with simplicity and effectiveness of even this free product which is not the case with most other products. The support I received from Quinnie was phenomenal and unusual for a free product. She was patient and persistent in helping and solving the issue. Thanks.

   Read on wp.org ↗
7. ★★★★★ Michael Krämer

   1.7y ago

   Problem gelöst. super freundlich. der Support war auch mit einem schwierigen Problem nicht überfordert. Danke Vielmals.

   Read on wp.org ↗
8. ★★★★★ tondosusanto

   1.7y ago

   very good plugin and very useful to protect the page or post that we want in a very easy way, even very useful to protect the post category that we want, good job, thank you

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.9.20 [BugFix] Fixed an authorization issue related to password protection settings for posts and pages. [BugFix] Improved capability checks and access validation when managing protected content. 1.9.20
2. — Version 1.9.19 [BugFix] Fixed a potential PHP Object Injection vulnerability in protected post metadata handling. [Improvement] Improved data validation and serialization processing to enhance overall plugin security and reliability. 1.9.19
3. — Version 1.9.18 [BugFix] Resolved an issue where the plugin name was not displaying correctly in the deactivation modal. 1.9.18
4. — Version 1.9.17 [Feature] Added a plugin deactivation feedback modal. Users are now prompted with a popup upon deactivation to select a reason, helping us collect valuable insights for further improvements. 1.9.17
5. — Version 1.9.16 [BugFix] Fixed REST API vulnerability related to master password. [Improvement] Fixed WordPress Coding Standards issues. [Improvement] Enhanced overall code quality and security. 1.9.16
6. — Version 1.9.15 [BugFix] Fixed a PHP notice triggered by undefined request data. 1.9.15

11 disclosed vulnerabilities on record for this plugin, 1 still affects the current version.

1. Medium · 6.4 Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-08-24 CVE-2025-9878 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.9.21 Patched in 1.9.22
2. High · 8.8 PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles ↗
   2026-08-22 CVE-2026-0551 Deserialization of Untrusted Data Affects <= 1.9.18 Patched in 1.9.19
3. Medium · 4.3 PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure ↗
   2026-08-18 CVE-2025-11729 Improper Authorization Affects <= 1.9.15 Patched in 1.9.16
4. Medium · 4.3 Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update ↗
   2026-08-15 CVE-2025-10005 Authorization Bypass Through User-Controlled Key Affects <= 1.9.20 Patched in 1.9.21
5. Medium · 6.4 PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes ↗
   2026-08-12 CVE-2026-3639 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.9.21 No patch available
6. Medium · 4.3 PPWP – Password Protect Pages <= 1.9.19 - Authenticated (Contributor+) Insecure Direct Object Reference ↗
   2026-06-26 CVE-2026-57634 Authorization Bypass Through User-Controlled Key Affects <= 1.9.19 Patched in 1.9.20
7. Medium · 4.3 PPWP – Password Protect Pages <= 1.9.15 - Missing Authorization ↗
   2026-03-23 CVE-2026-32562 Missing Authorization Affects <= 1.9.15 Patched in 1.9.16
8. Medium · 4.3 PPWP – Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST API ↗
   2025-08-25 CVE-2025-5998 Improper Handling of Insufficient Permissions or Privileges Affects <= 1.9.10 Patched in 1.9.11
9. Medium · 5.3 PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure ↗
   2024-12-16 CVE-2024-11280 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.9.5 Patched in 1.9.6
10. Medium · 5.3 PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass ↗
    2024-02-07 CVE-2024-0620 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.8.9 Patched in 1.9.0
11. Medium · 6.4 PPWP – WordPress Password Protect Page <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-01-10 CVE-2022-4626 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.5 Patched in 1.8.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 5 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-11-30 40K+ → 30K+ down after 36 days in tier
2. 2024-10-25 30K+ → 40K+ up after 611 days in tier
3. 2023-02-22 20K+ → 30K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Passster – Password Protect Pages and Content 10K+ installs · 4.2★ · 5 shared tags A
• Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content 300K+ installs · 4.4★ · 3 shared tags A
• ContentProtector – password protect your page, post or text 4K+ installs · 3.6★ · 3 shared tags C
• Password for WP 200+ installs · 3.6★ · 3 shared tags B
• Very Simple Password for WordPress 200+ installs · 4.2★ · 3 shared tags D
• Nucuta Password Protect 10+ installs · 4.0★ · 3 shared tags D

Embed this report card

Drop a live Pulse card for PPWP – Password Protect Pages into a readme, a review or a deck. It updates itself.

PPWP – Password Protect Pages: 30K+ active installs, 4.7★ (270 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/password-protect-page