Plugin Pulse
← Pulse

SiteGuard WP Plugin

by jp-secure · Security

Adds WordPress login and admin protections, including CAPTCHA, login lock, login alerts, renamed login URLs, and SiteGuard WAF tuning support.

How scoring works →
90 Health · A
Maintenance 100/100
Rating quality 79/100
Support 89/100

90 health vs 64 average across 997 Security plugins

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

91 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100
WP compatibility 100/100
Rating quality 70/100
Listing tuning 100/100
Support resolution 83/100

Daily downloads

Since 2022-10-05 · 1,421 days · wp.org + Plugin Pulse archive

-31% vs prior 30d
5.4KDownloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

455.4K

now · peak 1.0M

454.9K30d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

SiteGuard WP Plugin · #114 you CloudSecure WP Secur · #304 Wordfence Login Secu · #633 Login Security Captc · #2155

Rating trend

Star average over time · dips mark rough releases

4.3Stars · Aug 26

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

910per 1k installs · Aug 26

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

18

releases in the last 12 months

2mo ago

latest release · v1.8.7

47

tagged releases on record

Recent releases

1.8.7 · 2mo ago1.8.6 · 2mo ago1.8.6-beta2 · 2mo ago1.8.6-beta1 · 2mo ago1.8.5 · 2mo ago1.8.4 · 2mo ago1.8.3 · 2mo ago1.8.2 · 2mo ago1.8.1 · 2mo ago1.8.0 · 2mo ago1.8.0-beta4 · 2mo ago1.8.0-beta3 · 2mo ago1.8.0-beta2 · 3mo ago1.8.0-beta1 · 3mo ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 35% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v1.7 48%
v1.8 35%
v1.6 6.5%
v1.5 5.9%
Older / other versions 4.3%

Estimated active installs

The public count shows “500K+”. Our estimate pins where the real number sits.

modeled estimate
500K–600K ≈570K

Modeled within the band wp.org reports; tightens as we track daily.

Install history · since 2015-04-19 · 1,456 observations

500KInstalls · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

Details

Version
1.8.9
Last updated
6d ago
Added
2014-10-22 · 11 yrs old
Requires WP
6.0
Tested up to
7.1
Requires PHP

Recent reviews

All reviews on wp.org ↗
  1. alexbrowp
    1.7y ago

    When you log out, the session is not closed and you can still go to wp-admin. Also, redirecting wp-admin to the custom login page doesn’t help with security

    Read on wp.org ↗
  2. wpuserjp202306t
    3.1y ago

    .

    Read on wp.org ↗
  3. Fumiki Takahashi
    3.2y ago

    誰でもユーザーを登録できるサイトを作っているのですが、ログイン保護機能を利用しています。スパムアカウントが減りました。

    Read on wp.org ↗
  4. tsutlnps149
    5.7y ago

    管理ページアクセス制限を有効にすると、サイトヘルスで「サイトでループバックリクエストが完了できませんでした」という文字が出るが、この問題、site-health.phpを除外設定にしてもなお出続ける。 制限をOFFにすると、出なくなる。 バージョン「1.5.1」でのアップデートで、この問題は解決したようです。ありがとうございました。 This topic was modified 5 years, 5 months ago by tsutlnps149.

    Read on wp.org ↗
  5. T. Sagawa
    5.9y ago

    Nothing work in multi-site mode.

    Read on wp.org ↗
  6. lw53
    6.0y ago

    All the features I require with easy to follow instructions of how to correctly set-up.

    Read on wp.org ↗
  7. vaclavek
    6.2y ago

    Very effective tool with simple and flexible interface.

    Read on wp.org ↗
  8. Anonymous User 16694661
    7.7y ago

    ワードプレスのデフォルトの仕様だと思いますが、/wp-admin/にアクセスするとプラグインで変更したログイン画面のurlヘリダイレクトされてしまいますのでこちらの改善もお願いいたします。 例) example.co.jp/wp-admin ↓ リダイレクト example.co.jp/プラグインで設定したログイン画面のURL文字列 個人的には下記のコードで対処しています。 add_action('init', 'remove_default_redirect'); add_filter('auth_redirect_scheme', 'stop_redirect', 9999); function stop_redirect($scheme) { if ( $user_id = wp_validate_auth_cookie( '', $scheme) ) { return $scheme; } global $wp_query; $wp_query->set_404(); get_template_part( 404 ); exit(); } よろしくお願いいたします。 This topic was modified 7 years, 7 months ago by Anonymous User 16694661.

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. Version 1.8.7 Fixed a cross-site scripting (XSS) vulnerability in the logout URL that could occur when the login page URL is changed. Special thanks to daroo (Patchstack) for the report. 1.8.7
  2. Version 1.8.6 Rename Login: when the login URL falls back to the .php (stub) form, the settings screen now explains why .htaccess could not be used. Rename Login: fixed the .htaccess self-test so it works when WordPress has been given 1.8.6
  3. Version 1.8.5 Fixed a security issue affecting the login URL protection on some server configurations. Special thanks to goto5656 for the report. 1.8.5
  4. Version 1.8.4 Fixed a security issue affecting the login URL protection on some server configurations. Special thanks to goto5656 for the report. 1.8.4
  5. Version 1.8.3 Fixed an issue where the cleanup of legacy .htaccess rules (which could lock administrators out of /wp-admin/) did not run on sites that had already updated to 1.8.0 or 1.8.1. 1.8.3
  6. Version 1.8.2 Fixed an issue where upgrading from 1.7.x to 1.8.x could leave legacy .htaccess rules in place, locking administrators out of /wp-admin/. Special thanks to t.inoue for the report. 1.8.2

Known vulnerabilities

via Wordfence Intelligence

3 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

  1. 2026-08-08 CVE-2026-61982 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.6 Patched in 1.8.7
  2. 2026-02-23 CVE-2026-27411 Missing Authorization Affects <= 1.7.9 Patched in 1.7.10
  3. 2024-06-21 CVE-2024-37881 Protection Mechanism Failure Affects <= 1.7.6 Patched in 1.7.7

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Low memory footprint
Low page-speed impact
Runs on latest PHP + WP
No PHP errors
No JS errors
Activates cleanly
No resource errors
No external HTTP errors
Optimized database use
Frequently updated

Languages

via translate.wordpress.org

Translated into 68 languages, 5 at 90% or more

Dutch 100%
Dutch (Formal) 100%
English (UK) 100%
Japanese 100%
Spanish (Spain) 100%
Russian 52%
Persian 47%
Spanish (Chile) 47%
Spanish (Colombia) 47%
Spanish (Venezuela) 47%
Swedish 46%
Spanish (Mexico) 45%
German 39%
Spanish (Argentina) 36%
German (Formal) 30%
Ukrainian 27%
Dutch (Belgium) 16%
French (France) 14%
Romanian 11%
English (Canada) 9%
Urdu 7%
English (Australia) 6%
Azerbaijani 5%
Cebuano 5%

Plus 44 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-08-25 600K+ → 500K+ down after 2 days in tier
  2. 2026-08-23 500K+ → 600K+ up after 8 days in tier
  3. 2026-08-15 600K+ → 500K+ down after 3 days in tier
  4. 2026-08-12 500K+ → 600K+ up after 1 days in tier
  5. 2026-08-11 600K+ → 500K+ down after 2 days in tier
  6. 2026-08-09 500K+ → 600K+ up after 70 days in tier
  7. 2026-05-31 600K+ → 500K+ down after 89 days in tier
  8. 2026-03-03 500K+ → 600K+ up after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for SiteGuard WP Plugin into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/siteguard" width="480" height="300" style="border:0" loading="lazy" title="SiteGuard WP Plugin — Plugin Pulse"></iframe>
Preview card ↗

SiteGuard WP Plugin: 500K+ active installs, 4.3★ (15 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/siteguard