Simple JWT Login – Allows you to use JWT on REST endpoints.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 84% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ Amine

   3mo ago

   Even I didn’t test the plugin deeply, but after the 1st impression it was well-crafted. Deserve 5 stars ^^

   Read on wp.org ↗
2. ★★★★★ cbd4coins

   10mo ago

   I just want to first say that this is by far the best JWT plugin for headless. I’ve tried them all! I think the best feature you could add, would be support for the new Store API for WooCommerce. It would make headless eCommerce much simpler! I had a lot of difficulty getting users instead of guests assigned to cart/checkout flow and had to write a custom extension

   Read on wp.org ↗
3. ★★★★★ Thomas

   1.6y ago

   This is probably the very absolute best no-nonsense JWT plugin on WordPress. Exceptionally well documented, high customization, easy to setup, and works out of the box with basic setup. No nonsense ads, either. Definitely deserving the 5-star rating across the board. Recommended.

   Read on wp.org ↗
4. ★★★★★ wintear

   3.8y ago

   JWT login plugin is awesome, their support is quite responsive and efficient.They are able to help me and guide me on my customize function to custom generate jwt using their classes.

   Read on wp.org ↗
5. ★★★★★ webmaster67

   3.8y ago

   it’s the best of all JWT plugins, the responsiveness of the developer is simply incredible, he knows his project by heart and will help you efficiently. c’est le meilleur de tous les plugins JWT la réactivité du développeur est tout simplement incroyable ,il connait son projet par cœur et vous aidera efficacement.

   Read on wp.org ↗
6. ★★★★★ graphems

   3.8y ago

   This is what I needed, works as expected. Nice work!

   Read on wp.org ↗
7. ★★★★★ tobiik

   4.2y ago

   Hello, Nicu Micle. Thanks for making my life easier. The plugin is really good. You are the best and a great developer. This plugin works great! the only thing: if you want to use the verification, go to the login section and in JWT Login Settings set Log In by WordPress username and in the JWT parameter key write username. thank you mate. really appreciate it.

   Read on wp.org ↗
8. ★★★★★ bikerflyeradmin

   4.3y ago

   After installing this plugin and following all the docs, which explain nothing about how to create the secret key to enter into the settings, the plugin does still not work. Every request to API returns invalid credentials error even with correct email and password. Big fail. Horrible plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.6.7 Improve plugin security 3.6.7
2. — Version 3.6.6 Update WordPress 7.0 Compatibility 3.6.6
3. — Version 3.6.5 Fix CVE-2025-58648 – Stored Cross-Site Scripting vulnerability PR Fix for bug: Reset password function doesn’t use base64 encoding logic and doesn’t allow user to use any special character #161 #163 Fix PHP session initi 3.6.5
4. — Version 3.6.4 Update WordPress 6.8 Compatibility 3.6.4
5. — Version 3.6.3 Fix protect endpoints #149 3.6.3
6. — Version 3.6.2 Fix blocked backened endpoints by ProtectEndpoints #146 Ensure Protect endpoints searches for JWT in session 3.6.2

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.3 Simple JWT Login – Allows you to use JWT on REST endpoints. < 3.6.8 - Unauthenticated Privilege Escalation ↗
   2026-08-20 CVE-2026-19714 Improper Privilege Management Affects < 3.6.8 Patched in 3.6.8
2. High · 8.8 Simple JWT Login <= 3.6.6 - Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation via 'payload' Parameter ↗
   2026-07-10 CVE-2026-14262 Improper Privilege Management Affects <= 3.6.6 Patched in 3.6.7
3. Medium · 6.4 Simple JWT Login <= 3.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-22 CVE-2025-58648 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.4 Patched in 3.6.5
4. High · 8.8 Simple JWT Login <= 3.2.0 - Cross-Site Request Forgery ↗
   2021-10-18 CVE-2021-24804 Cross-Site Request Forgery (CSRF) Affects < 3.2.1 Patched in 3.2.1
5. High · 7.5 Simple JWT Login <= 3.2.1 - Insecure Password Creation ↗
   2021-10-13 CVE-2021-24998 Inadequate Encryption Strength Affects < 3.3.0 Patched in 3.3.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 4 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-18 3K+ → 4K+ up after 1 days in tier
2. 2026-08-17 4K+ → 3K+ down after 83 days in tier
3. 2026-05-26 5K+ → 4K+ down after 72 days in tier
4. 2026-03-15 4K+ → 5K+ up after 1 days in tier
5. 2026-03-14 5K+ → 4K+ down after 1 days in tier
6. 2026-03-13 4K+ → 5K+ up after 345 days in tier
7. 2025-04-02 5K+ → 4K+ down after 129 days in tier
8. 2024-11-24 4K+ → 5K+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• A API Bearer Auth 300+ installs · 4.3★ · 2 shared tags B
• WP Login and Register using JWT 100+ installs · 4.2★ · 2 shared tags A
• Simple REST API Authenticaton with WooCommerce Credentials 60+ installs · 4.0★ · 2 shared tags B
• WP Consent API 200K+ installs · 4.1★ · 1 shared tag B
• Disable REST API 80K+ installs · 4.6★ · 1 shared tag D
• Make Connector 80K+ installs · 3.1★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for Simple JWT Login – Allows you to use JWT on REST endpoints. into a readme, a review or a deck. It updates itself.

Simple JWT Login – Allows you to use JWT on REST endpoints.: 4K+ active installs, 5.0★ (47 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/simple-jwt-login