Protect WP Config File from Phishing Attacks
by Michele Butcher-Jones · Security
Returns a blank white page if people try to load the wp-config file (or backups of it) in a web browser.
41 health vs 63 average across 657 Security plugins
High removal-risk signals
63/100Maintenance and integrity signals that tend to precede a WordPress.org removal. Not an official status, a heads-up to act.
- Long abandoned. No update in 10+ years — the top precursor to removal once a vulnerability is found.
- Compatibility drift. Tested only up to WordPress 4.1.0, well behind 6.8.
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Under-optimized
Biggest win: Update recency
To rank higher: Last updated 3754 days ago — ship an update; wp.org decays a listing's search weight after ~180 days.
Get the full rank-higher report →Daily downloads
Since 2022-10-05 · 1,381 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
59
now · peak 165
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Downloads per 1k installs · 30d
Engagement proxy · release spikes are signal, a long slide is an aging base
Estimated active installs
wp.org reports only “40+”. The real number sits in this band.
Refined from the date this plugin crossed into its current band.
Install history · since 2022-10-04 · 1,380 observations
Details
Growth timeline
Install-band crossings we have observed, and how long each band took to outgrow
- 2025-12-23 50+ → 40+ down after 93 days in band
- 2025-09-21 60+ → 50+ down after 11 days in band
- 2025-09-10 50+ → 60+ up after 3 days in band
- 2025-09-07 60+ → 50+ down after 13 days in band
- 2025-08-25 50+ → 60+ up after 4 days in band
- 2025-08-21 60+ → 50+ down after 7 days in band
- 2025-08-14 50+ → 60+ up after 64 days in band
- 2025-06-11 60+ → 50+ down after 132 days in band
Competes with
The plugins that solve the same job, ranked by shared tags then reach — closest match first
-
Jetpack Protect 100K+ installs · 4.6★ · 2 shared tags A -
htaccess protect 800+ installs · 3.8★ · 2 shared tags D -
Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A -
Hostinger Tools 3M+ installs · 3.6★ · 1 shared tag B -
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 1 shared tag A -
Jetpack – WP Security, Backup, Speed, & Growth 3M+ installs · 3.8★ · 1 shared tag A
Embed this report card
Drop a live Pulse card for Protect WP Config File from Phishing Attacks into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/protect-wp-config-from-phishing-attacks" width="480" height="300" style="border:0" loading="lazy" title="Protect WP Config File from Phishing Attacks — Plugin Pulse"></iframe> Protect WP Config File from Phishing Attacks: 40+ active installs, 0.0★ (0 reviews). Plugin Pulse (WP Mayor), as of 2026-07-17. https://plugins.wpmayor.com/plugin/protect-wp-config-from-phishing-attacks