SecuPress with Simple SSL – Simple and Performant Security

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

116 searches this plugin appeared in over the last 90 days, 20 listed. 90 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 3.5 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ jonkalamar

   6mo ago

   Bonjour, je souhaite autorisé un bot (Facebook) à faire son tour sur mon site et pouvoir partager les images de mes articles en publication sur FB.Il semble que le bot “facebookexternalhit” soit bloqué mais je ne trouve nulle part où libérer son passage. J’ai activé le mode “Expert” dans le tableau de bord de SecuPress mais je n’ai accès à rien qui me permette de gérer à la lettre ce que je souhait bloquer ou débloquer. Comment faire ?

   Read on wp.org ↗
2. ★★★★★ Mickael Maury

   8mo ago

   J’utilise SecuPress Pro sur plusieurs sites clients via une licence 25 sites. Depuis la mise à jour vers SecuPress Pro 2.6, plusieurs sites rencontrent des erreurs fatales liées aux processus en arrière-plan : Call to undefined method SecuPress_Background_Process_File_Monitoring::is_processing() ou Call to undefined method SecuPress_Background_Process_Bad_Plugins::is_processing() Ces erreurs apparaissent : via WP-Cron lors de l’accès au module File Monitoring parfois directement dans l’administration Les environnements sont différents (hébergeurs, thèmes, PHP 8.2 / 8.3), ce qui laisse penser à un bug introduit dans la version 2.6. Autre problème : plusieurs sites perdent aléatoirement la licence premium et basculent en version gratuite alors qu’ils sont toujours listés comme actifs. Ticket support envoyé, relance, toujours sans réponse à ce jour. Dommage car le plugin est intéressant sur le principe, mais pour un usage professionnel avec plusieurs sites clients, l’absence de réponse du support est problématique.

   Read on wp.org ↗
3. ★★★★★ Jonathan Webpixelia

   1.4y ago

   Jusqu’à présent, je l’installais sur tous mes sites mais ces derniers temps, trop de bugs et des mises à jour toutes les semaines. La version 2.3.16.1 m’a fait perdre une matinée entière pour downgrader à la version 2.3.15 et cerise sur le gateau j’ai du reconfiguré chaque site. Déçu.. J’espère que l’avenir me fera revenir sur cet avis, en attendant je vais surement me diriger vers une autre solution.

   Read on wp.org ↗
4. ★★★★★ Joffrey Nicoloff

   1.7y ago

   Great for protecting your website in a few clicks. Very easy to set up. The developer responded and acted very quickly when a problem occurred. You can trust him. As an improvement, I would have appreciated that some options were automatically active by default such as: Use a connection attempt blocker Connection errors Prohibit account enumeration Forbidden identifiers Disable all XML-RPC features Directory Listing PHP disclosure PHP version disclosure WordPress version disclosure Access to bad URLs Protection of readme files and other sensitive files Extension version disclosure

   Read on wp.org ↗
5. ★★★★★ cencaldave

   1.8y ago

   Customer service and communications when a negative situation is present is a pure zero from my experience. I had an automatic renewal take place that I believed was cancelled and have been trying to over 2 weeks to get a response or engage with the owner of this plugin. Zip, zero, nada. Has my dollars in his account and now seems to consider this a ethical source of income. Just be careful. Also, the plugin was way to much of a problem when I did try to use it. Many better options. And considering the business model that seems to be focused on income over all else, better options may be better.

   Read on wp.org ↗
6. ★★★★★ youenn35

   1.9y ago

   SecuPress Pro failed to detect or address a site infected due to CVE-2023-40000. Over 70 files were corrupted, with a script tag added to wp-config.php, and SecuPress flagged nothing. It also ignored dozens of POST requests to the /wp-json/litespeed/v1/cdn_status endpoint. To be fair, the plugin was installed after the infection, so it might have prevented it initially—but I wouldn’t recommend relying on this plugin.

   Read on wp.org ↗
7. ★★★★★ maksanse

   2.1y ago

   J’utilise Secupress avec un compte pro depuis plus de 5 ans pour tous mes sites. J’ai vraiment vécu une 1ère phase très satisfaisante avec le plugin : Une ergonomie au top, une équipe de support au taquet ! Bref, j’avais une grosse grosse confiance et me sentais “en sécurité”. Big up à Julio pour cette réalisation !!Hélas, depuis 2023, j’ai constaté des bugs improbables sur mes installations dont la source était telle ou telle fonctionnalité de SecuPress. J’ai alors voulu obtenir de l’aide et ai remonté dernièrement un souci vraiment bloquant, mais le support ne répond visiblement plus. En tant qu’entrepreneur, je comprends tout à fait qu’on puisse traverser des phases difficiles, et je souhaite le meilleur à Julio… Mais en tant que client, ne pas avoir de retours ni de solution alors que le plugin crée de gros soucis de performances est très problématique. Je ne peux donc hélas plus le recommander actuellement, mais serai ravi à l’avenir de modifier ce post. This topic was modified 1 year, 9 months ago by maksanse. This topic was modified 1 year, 9 months ago by maksanse. Reason: mise à jour note + titre This topic was modified 1 year, 9 months ago by maksanse. Reason: mise à jour note + titre

   Read on wp.org ↗
8. ★★★★★ aglig

   2.4y ago

   L’extension SecuPress offre deux avantages majeurs : une protection complète contre les menaces de sécurité et une interface utilisateur intuitive. Je souhaite exprimer ma profonde reconnaissance envers l’équipe de SecuPress pour leur intervention exemplaire qui a sécurisé mon site web face à des menaces critiques. Grâce à leur plugin performant et leurs conseils avisés, nous avons pu neutraliser plusieurs vulnérabilités majeures. Aujourd’hui, je suis serein en sachant que 15 de mes sites bénéficient de la protection robuste offerte par SecuPress. Le plugin SecuPress est intuitif, riche en fonctionnalités et offre des solutions de sécurité de haut niveau, adaptées aussi bien aux débutants qu’aux experts en sécurité. L’équipe de support est réactive, professionnelle et extrêmement compétente, toujours prête à fournir une assistance précieuse. Je recommande vivement SecuPress à tous les administrateurs de sites WordPress désireux de renforcer la sécurité de leurs sites. Merci infiniment, SecuPress !

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.6.3 21 July 2026 Fix: “Uncaught TypeError: str_rot13(): Argument #1 ($string) must be of type string, array given” Fix: antispam.min.js error Fix: is_process_running() error again. 2.6.3
2. — Version 2.7 12 Sep 2026 New: Pause the security for 30 minutes (settings kept, auto-resume, email warning). New: Dashboard widget “System Status”. New: Alerts when an application password is added to an account. New: Expert settings 2.7
3. — Version 2.7.1 25 Sep 2026 New: Firewall Learning Mode for 8G (observe signatures, review hits, allow globally or per URL prefix, auto-calibrate). Improvement: WAF revamp: 8G signatures are now optional per filter, with local exception 2.7.1
4. — Version 2.7.2 19 Oct 2026 Critical: Warn admins so they can check the backdoor and patch it. New: Passwordless login now uses a 6-digit code instead of a magic link. New: Disable Application Passwords: refuse and log any Application P 2.7.2
5. — Version 2.7.3 22 Oct 2026 Critical: PHP Version scanner treats a known PHP build older than October 21, 2026 as critical and can re-run silently when that date is detected. Critical: UpdraftCentral backdoor check better detects compro 2.7.3

All 6 disclosed vulnerabilities are patched in the current version (2.7.3). Sites still on an older version should update.

1. Patched Medium · 4.3 SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation ↗
   2025-04-28 CVE-2025-3452 Missing Authorization Affects <= 2.3.9 Patched in 2.3.10
2. Patched Medium · 6.4 SecuPress Free <= 2.2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-03-27 CVE-2025-30907 Improper Neutralization of Input During Web Page Generation Affects <= 2.2.5.3 Patched in 2.2.5.4
3. Patched Medium · 5.3 SecuPress Free <= 2.2.5.3 - Missing Authorization ↗
   2025-03-11 CVE-2024-43228 Missing Authorization Affects <= 2.2.5.3 Patched in 2.3
4. Patched Medium · 6.4 SecuPress Free — WordPress Security <= 2.2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via secupress_check_ban_ips_form Shortcode ↗
   2025-02-27 CVE-2024-9019 Improper Neutralization of Input During Web Page Generation Affects <= 2.2.5.3 Patched in 2.3
5. Patched Medium · 4.3 SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address ↗
   2024-04-01 CVE-2024-1504 Cross-Site Request Forgery Affects <= 2.2.5.1 Patched in 2.2.5.2
6. Patched High · 7.5 SecuPress Free and SecuPress Pro <= 1.4.12 - Unauthenticated Arbitrary IP Ban ↗
   2021-03-22 Missing Authorization Affects < 2.0 Patched in 2.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 8 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-05-14 30K+ → 40K+ up after 1 days in tier
2. 2023-05-13 40K+ → 30K+ down after 50 days in tier
3. 2023-03-24 30K+ → 40K+ up after 2 days in tier
4. 2023-03-22 40K+ → 30K+ down after 14 days in tier
5. 2023-03-08 30K+ → 40K+ up after 4 days in tier
6. 2023-03-04 40K+ → 30K+ down after 2 days in tier
7. 2023-03-02 30K+ → 40K+ up after 821 days in tier
8. 2020-12-01 20K+ → 30K+ up after 522 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for SecuPress with Simple SSL – Simple and Performant Security into a readme, a review or a deck. It updates itself.

SecuPress with Simple SSL – Simple and Performant Security: 40K+ active installs, 4.1★ (106 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/secupress