Theme My Login

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 84% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ Bogdan

   12mo ago

   I like this plugin, it’s simple to start with and well documented if you need to dive deeper into modifications.

   Read on wp.org ↗
2. ★★★★★ SJW

   2.4y ago

   Perfect – I just wanted a simple plugin that formatted the registration and login pages. I would like the existing WP login and register pages to redirect to these but not a big deal – and I don’t know what the repercussions of this might be anyway.

   Read on wp.org ↗
3. ★★★★★ Emilio Lejit

   2.6y ago

   Magnificent plugin.

   Read on wp.org ↗
4. ★★★★★ jastrzab

   2.9y ago

   I really appreciate that this plugin exists. However, I can’t believe you must pay for such basic thing as requiring strong password! It does not work well with Elementor (if you specify your own pages/slugs).

   Read on wp.org ↗
5. ★★★★★ napes7

   2.9y ago

   Useless. It was nearly flawless years ago when it was free. Now that they are selling it, they let it go. It has conflicts with most other plugins ans support on their page is rubbish. I will remember the 2 unanswered tickets when they ask for my renewal fee. This topic was modified 2 years, 10 months ago by napes7.

   Read on wp.org ↗
6. ★★★★★ Mike

   3.6y ago

   Look-&-Feel works nice, but kills other 2FA plugins, so: dropped.

   Read on wp.org ↗
7. ★★★★★ ilarreola

   3.8y ago

   This is very nice simple and effective solution.

   Read on wp.org ↗
8. ★★★★★ tartarbar

   3.8y ago

   easy customization

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 7.1.14 Ensure license nonce check only occurs on licenses page 7.1.14
2. — Version 7.1.13 Check for proper permission when managing licenses Check for nonce when managing license keys 7.1.13
3. — Version 7.1.12 Revert converting get_title() to abstract on TML extension class 7.1.12
4. — Version 7.1.11 Reinstate missing message on lostpassword form Convert get_title() to an abstract function on TML extension class 7.1.11
5. — Version 7.1.10 Tested up to 6.7.1 Ensure settings attributes are properly wrapped in quotes Fix nonce check when saving multisite settings 7.1.10
6. — Version 7.1.9 Fix multisite settings save regression caused by 7.1.8 Mark slug settings fields as required 7.1.9

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Theme My Login <= 7.1.14 - Cross-Site Request Forgery ↗
   2026-08-06 CVE-2026-66681 Cross-Site Request Forgery (CSRF) Affects <= 7.1.14 Patched in 7.1.15
2. Medium · 5.3 Theme My Login <= 7.1.12 - Missing Authorization ↗
   2025-09-26 CVE-2025-60098 Missing Authorization Affects <= 7.1.12 Patched in 7.1.13
3. Medium · 4.3 Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update ↗
   2024-08-15 CVE-2024-7422 Cross-Site Request Forgery (CSRF) Affects <= 7.1.7 Patched in 7.1.8
4. Medium · 4.3 Theme My Login <= 7.1.6 - Missing Authorization to Notice Dismissal ↗
   2024-04-15 CVE-2024-32525 Missing Authorization Affects <= 7.1.6 Patched in 7.1.7
5. High · 8.8 Theme My Login <= 6.3.9 - Local File Inclusion ↗
   2014-06-30 CVE-2014-5155 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects < 6.3.10 Patched in 6.3.10

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.3

Translated into 92 languages, 19 at 90% or more

Plus 68 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-09-21 70K+ → 60K+ down after 14 days in tier
2. 2025-09-07 60K+ → 70K+ up after 1 days in tier
3. 2025-09-06 70K+ → 60K+ down after 323 days in tier
4. 2024-10-18 80K+ → 70K+ down after 324 days in tier
5. 2023-11-29 90K+ → 80K+ down after 1 days in tier
6. 2023-11-28 80K+ → 90K+ up after 1 days in tier
7. 2023-11-27 90K+ → 80K+ down after 191 days in tier
8. 2023-05-20 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• L Login Logo 40K+ installs · 4.7★ · 2 shared tags C
• Google Authenticator 20K+ installs · 4.3★ · 2 shared tags A
• Frontend Reset Password 10K+ installs · 4.3★ · 2 shared tags B
• Force Authentification Before Checkout for WooCommerce 5K+ installs · 4.8★ · 2 shared tags A
• L Login Security Solution 4K+ installs · 4.3★ · 2 shared tags D
• AJAX Login and Registration modal popup + inline form 3K+ installs · 4.6★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Theme My Login into a readme, a review or a deck. It updates itself.

Theme My Login: 60K+ active installs, 3.7★ (460 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/theme-my-login