Plugin Pulse Beta
← Pulse

Prevent Direct Access – Protect WordPress Files

by WP Folio Team · Uncategorized

Also makes 1 other plugin · 40K+ installs across the portfolio →

A simple way to prevent search engines and the public from indexing and accessing your files without complex user authentication.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 88/100

no flags

Active installs

10K+

≈19K estimated

Momentum

-28%

downloads vs prior 30d

Biggest opportunity: Swap “downloads”, “protection” and “uploads” for “gold”, “prevent copy” and “content theft”. “downloads” isn't earning its slot: you're not in the first 24 results for its own search. “gold” sits at #4 untagged, close enough for a declared tag to move it up. “protection” isn't earning its slot: you're not in the first 24 results for its own search. “prevent copy” sits at #4 untagged, close enough for a declared tag to move it up. “uploads” isn't earning its slot: you're not in the first 24 results for its own search. “content theft” sits at #6 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

How scoring works →
88 Health · A
Maintenance 100/100
Rating quality 91/100
Support 70/100
Security 79/100

88 health vs 58 average across 25,755 Uncategorized plugins

Install conversion

How it's measured →

3.2%

of downloads still active

At least 10K of 315.4K lifetime downloads are still running, above its category: the median Uncategorized plugin keeps 0.6%, across 17,774 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Uncategorized plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 8 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Details

Version
2.8.9.1
Last updated
2mo ago
Added
2015-11-27 · 10 yrs old
Requires WP
4.7
Tested up to
7.1.4
Requires PHP
7.0

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

98 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 67 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 91/100

4.6★ over 297 reviews, smoothed to 4.53★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 100/100

1 of 1 support threads resolved in the last 2 months

Daily downloads

Since 5 Oct 2022 · 1,489 days · wp.org + Plugin Pulse archive

-28% vs prior 30d
691 Nov 2026

30-day downloads

Rolling 30-day volume · peak 20K · peaks are release surges

3.4K1 Nov 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Prevent Direct Acces · #1843youMedia Vault · #7617NinjaFirewall (WP Ed · #344Email Address Encode · #404

Rating trend

Star average over time · dips mark rough releases

4.61 Nov 2026

Health trend

Composite health score, snapshotted daily

881 Nov 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

3441 Nov 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

8

releases in the last 12 months

2mo ago

latest release · v2.8.9.1 · 27 Aug 2026

30

tagged releases on record

Recent releases

2.8.9.1 · 27 Aug 20262.8.9.0 · 7 Aug 20262.8.8.9 · 7 Aug 20262.8.8.8 · 6 May 20262.8.8.7 · 6 Apr 20262.8.8.6 · 23 Mar 20262.8.8.5 · 20 Mar 20262.8.8.4 · 23 Dec 20252.8.8.3 · 15 Sep 20252.8.8.2 · 26 Feb 20252.8.8.1 · 17 Feb 20252.8.7 · 30 Jan 20252.8.8 · 30 Jan 20252.8.6.1 · 20 May 2024

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 98% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v2.8 98%
v2.7 2.1%

Estimated active installs

The public count shows “10K+”. Our estimate pins where the real number sits.

tracked estimate
10K–20K ≈19K

Crossed into this band 2.8 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

Install history since 6 Oct 2016

10K1 Nov 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ nathanpennington
    4mo ago

    Highly recommend Muhammad and his team for your website needs. They obviously care about customer support and they have an outstanding plugin that is reliable and will not slow down your website. If you want to know what excellence looks like I would highly recommend getting the Prevent Direct Access plugin. If you have any questions the Prevent Direct Access customer support team are always attentive to customer needs and respond fast.

    Read on wp.org ↗
  2. ★★★★★ Wild
    9mo ago

    The pro plugin delivers, providing protection and security to files which contain commercial, sensitive or personal information. I have had a pro license for some time and even though the license has expired in 2024 I have been billed afterwards. The support staff of PDA have handled this swiftly and professionally (see thread). In case you are unable to stop the payment through your payment provider, get in touch with them before the renewal takes place. This topic was modified 5 months ago by Wild.

    Read on wp.org ↗
  3. ★★★★★ xsonic
    9mo ago

    Almost every useful feature is locked away. Uninstalled immediately.

    Read on wp.org ↗
  4. ★★★★★ rycreat10
    11mo ago

    I’m not one to write reviews, but the WP Folio Team definitely deserves one. I’m completely impressed with their support. They are unparalleled! Whatever you need, you can be sure they will do everything to help and guide you. They are simply polite, kind, and have immense patience to ensure customer satisfaction in resolving problems. Regarding the products (plugins), they are of the same exceptional quality as the support, and that’s very rare. Thank you so much Quinnie, Muhammad, and everyone at the WP Folio Team! You are all amazing!

    Read on wp.org ↗
  5. ★★★★★ morrischapman
    1.1y ago

    Great support.

    Read on wp.org ↗
  6. ★★★★★ sasha49
    1.3y ago

    The team at Prevent Direct Access helped me find a custom solution that I wouldn’t have been able to complete without their help. They were responsive, kind, and came to a solution that worked well on the website. We had to protect a website’s files mid project and with the team at Prevent Direct Access, we were able to redirect URLS on mass. This plugin is great for any developers looking to prevent access to documents and files. Highly recommend the plugin and their support team!

    Read on wp.org ↗
  7. ★★★★★ danfor
    1.3y ago

    團隊的後續技術支持很到位

    Read on wp.org ↗
  8. ★★★★★ Simon Pollard
    1.5y ago

    Does not work with Nginx and also as an added bonus blocked all Editor uses from seeing pages giving them a 404 instead.

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 2.8.8.8 [Bugfix] Fixed an issue where the plugin name was not displaying correctly in the deactivation modal. 2.8.8.8
  2. — Version 2.8.8.7 [Bugfix] Resolved an issue causing redirect conflict with the Pro plugin and addressed warnings. 2.8.8.7
  3. — Version 2.8.8.6 [Bugfix] Fixed an issue where the reason for plugin deactivation was not being captured correctly. 2.8.8.6
  4. — Version 2.8.8.5 [Improvement] Resolved WordPress Coding Standards (WPCS) issues. [Improvement] Enhanced overall code quality and strengthened security. [Feature] Added a plugin deactivation feedback modal. Users are now prompted with a 2.8.8.5
  5. — Version 2.8.8.4 [Feature] Added an onboarding Opt-In/Opt-Out screen on first plugin activation, allowing users to grant or deny analytics consent. [Feature] Introduced GreyLayout for locked premium features, displaying all Gold features 2.8.8.4
  6. — Version 2.8.8.3 [Improvement] Security: Restrict REST API access to file protection endpoints to admin users only. 2.8.8.3

Security history

via Wordfence Intelligence

All 3 disclosed vulnerabilities are patched in the current version (2.8.9.1). Sites still on an older version should update.

  1. 2026-08-12 CVE-2026-3835 Improper Authorization Affects <= 2.8.8.8 Patched in 2.8.8.9
  2. 2025-04-24 CVE-2025-3861 Incorrect Authorization Affects 2.8.6 - 2.8.8.2 Patched in 2.8.8.3
  3. 2025-04-24 CVE-2025-3923 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.8.8 Patched in 2.8.8.1

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Languages

via translate.wordpress.org

Translated into 4 languages, 0 at 90% or more

Japanese 67%
Spanish (Spain) 15%
German 3%
French (France) 2%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

6 of 8 pass · checked 26 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ! Says what it does Short description names no action; say what the plugin does for the site.
  • ✓ Has a FAQ 5 questions in the FAQ.
  • ✓ FAQ asks real questions 5 of 5 read like questions a user would type.
  • ! Names who it is for One audience phrase ("if you have"); say who the plugin is for and what they use it for.
  • ✓ Names what it works with Mentions WooCommerce, LearnDash, Multisite, Amazon S3.
  • ✓ Headings and lists 13 headings and 2 lists.
  • ✓ Enough to quote 5,123 characters of description.
  • ✓ Tags match the text 4 of 5 tags appear in the text; "copy protection" does not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2024-02-01 9K+ → 10K+ up after 207 days in tier
  2. 2023-07-09 8K+ → 9K+ up after 263 days in tier
  3. 2022-10-19 7K+ → 8K+ up after 103 days in tier
  4. 2022-07-08 6K+ → 7K+ up after 77 days in tier
  5. 2022-04-22 5K+ → 6K+ up after 139 days in tier
  6. 2021-12-04 3K+ → 5K+ up after 388 days in tier
  7. 2020-11-11 2K+ → 3K+ up after 97 days in tier
  8. 2020-08-06 1K+ → 2K+ up after 264 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Prevent Direct Access – Protect WordPress Files into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/prevent-direct-access" width="480" height="300" style="border:0" loading="lazy" title="Prevent Direct Access – Protect WordPress Files — Plugin Pulse"></iframe>
Preview card ↗

Prevent Direct Access – Protect WordPress Files: 10K+ active installs, 4.6★ (297 reviews). Plugin Pulse (WP Mayor), as of 2026-11-02. https://plugins.wpmayor.com/plugin/prevent-direct-access

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.