Prevent Direct Access – Protect WordPress Files

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 98% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ nathanpennington

   1mo ago

   Highly recommend Muhammad and his team for your website needs. They obviously care about customer support and they have an outstanding plugin that is reliable and will not slow down your website. If you want to know what excellence looks like I would highly recommend getting the Prevent Direct Access plugin. If you have any questions the Prevent Direct Access customer support team are always attentive to customer needs and respond fast.

   Read on wp.org ↗
2. ★★★★★ Wild

   6mo ago

   The pro plugin delivers, providing protection and security to files which contain commercial, sensitive or personal information. I have had a pro license for some time and even though the license has expired in 2024 I have been billed afterwards. The support staff of PDA have handled this swiftly and professionally (see thread). In case you are unable to stop the payment through your payment provider, get in touch with them before the renewal takes place. This topic was modified 5 months ago by Wild.

   Read on wp.org ↗
3. ★★★★★ xsonic

   7mo ago

   Almost every useful feature is locked away. Uninstalled immediately.

   Read on wp.org ↗
4. ★★★★★ rycreat10

   9mo ago

   I’m not one to write reviews, but the WP Folio Team definitely deserves one. I’m completely impressed with their support. They are unparalleled! Whatever you need, you can be sure they will do everything to help and guide you. They are simply polite, kind, and have immense patience to ensure customer satisfaction in resolving problems. Regarding the products (plugins), they are of the same exceptional quality as the support, and that’s very rare. Thank you so much Quinnie, Muhammad, and everyone at the WP Folio Team! You are all amazing!

   Read on wp.org ↗
5. ★★★★★ morrischapman

   11mo ago

   Great support.

   Read on wp.org ↗
6. ★★★★★ sasha49

   1.1y ago

   The team at Prevent Direct Access helped me find a custom solution that I wouldn’t have been able to complete without their help. They were responsive, kind, and came to a solution that worked well on the website. We had to protect a website’s files mid project and with the team at Prevent Direct Access, we were able to redirect URLS on mass. This plugin is great for any developers looking to prevent access to documents and files. Highly recommend the plugin and their support team!

   Read on wp.org ↗
7. ★★★★★ danfor

   1.1y ago

   團隊的後續技術支持很到位

   Read on wp.org ↗
8. ★★★★★ Simon Pollard

   1.3y ago

   Does not work with Nginx and also as an added bonus blocked all Editor uses from seeing pages giving them a 404 instead.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.8.8.8 [Bugfix] Fixed an issue where the plugin name was not displaying correctly in the deactivation modal. 2.8.8.8
2. — Version 2.8.8.7 [Bugfix] Resolved an issue causing redirect conflict with the Pro plugin and addressed warnings. 2.8.8.7
3. — Version 2.8.8.6 [Bugfix] Fixed an issue where the reason for plugin deactivation was not being captured correctly. 2.8.8.6
4. — Version 2.8.8.5 [Improvement] Resolved WordPress Coding Standards (WPCS) issues. [Improvement] Enhanced overall code quality and strengthened security. [Feature] Added a plugin deactivation feedback modal. Users are now prompted with a 2.8.8.5
5. — Version 2.8.8.4 [Feature] Added an onboarding Opt-In/Opt-Out screen on first plugin activation, allowing users to grant or deny analytics consent. [Feature] Introduced GreyLayout for locked premium features, displaying all Gold features 2.8.8.4
6. — Version 2.8.8.3 [Improvement] Security: Restrict REST API access to file protection endpoints to admin users only. 2.8.8.3

3 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Prevent Direct Access – Protect WordPress Files <= 2.8.8.8 - Unauthenticated Protected File Access ↗
   2026-08-12 CVE-2026-3835 Improper Authorization Affects <= 2.8.8.8 Patched in 2.8.8.9
2. Medium · 5.4 Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions ↗
   2025-04-24 CVE-2025-3861 Incorrect Authorization Affects 2.8.6 - 2.8.8.2 Patched in 2.8.8.3
3. Medium · 5.3 Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposure ↗
   2025-04-24 CVE-2025-3923 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.8.8 Patched in 2.8.8.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 4 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-02-01 9K+ → 10K+ up after 207 days in tier
2. 2023-07-09 8K+ → 9K+ up after 263 days in tier
3. 2022-10-19 7K+ → 8K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Protect Uploads 30K+ installs · 4.4★ · 2 shared tags A
• M Media Vault 800+ installs · 4.3★ · 2 shared tags D
• NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall 100K+ installs · 4.8★ · 1 shared tag A
• Email Address Encoder 100K+ installs · 4.1★ · 1 shared tag B
• A Add From Server 60K+ installs · 4.6★ · 1 shared tag D
• Media Sync 50K+ installs · 4.6★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for Prevent Direct Access – Protect WordPress Files into a readme, a review or a deck. It updates itself.

Prevent Direct Access – Protect WordPress Files: 10K+ active installs, 4.7★ (295 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/prevent-direct-access