WP Hide & Security Enhancer

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ andrebell82

   6mo ago

   Works well except for displaying the security widget to non-admins. This would be a five-star review if the plugin supported hiding security stats and access from non-admins. //shudder//ChatGPT created two plugins using the code from the publisher’s ‘Remove Dashboard Scan widget’ page. Plugin #1 removes the widget from all users. Plugin #2 makes the widget available to admins only. I am now using the admin-only plugin. Works great. Non admin accounts no longer see the widget. I will try to send the plugins to the author(s) to do whatever they want to do with those plugins. It is their code after all. Maybe they will incorporate the settings into a future release.

   Read on wp.org ↗
2. ★★★★★ joegold

   1.8y ago

   This plugin is very effective and performs well. Customer Support is highly responsive and willing to help and troubleshoot possible implementation obstacles.

   Read on wp.org ↗
3. ★★★★★ fatihaker

   2.1y ago

   Hi, Im using free version of your plugin. I set my custom login url. I also use cloudflare and secured my custom login page. But whenever a user logged out, custome url displays at the address bar. How I can hide it ? This topic was modified 2 years ago by fatihaker.

   Read on wp.org ↗
4. ★★★★★ mfmuller

   2.2y ago

   Aside from masking the fact that I am using a WordPress theme, I just feel better knowing that weirdos can’t sift through the code and steal stuff or cripple my site. I bought a single site WP-Hide Pro license to test it out but intend to upgrade to the developer version so I can use it on multiple sites. By the way, WP-Hide’s technical/customer service is fantastic. My server runs on something called “Nginx” (whatever that means) so installing the plugin required an extra step or two — all of which the folks at WP-Hide handled entirely for me. They are fast, responsive, professional, and very helpful. I highly recommend both them and their great little plugin.

   Read on wp.org ↗
5. ★★★★★ goldtecgimmer65

   2.4y ago

   Great job, it’s a really fantastic plugin from a security point of view, but it also confuses your competitors about how a website has been built! Thanks.

   Read on wp.org ↗
6. ★★★★★ itarendus

   2.4y ago

   Plugin is broken with fatal error after update the plugin just got on April 5 11:20.Fatal error: Uncaught ArgumentCountError: Too few arguments to function WPH_module_rewrite_default::_array_replacements_recursivelly(), 2 passed in /wp-content/plugins/wp-hide-security-enhancer/modules/components/rewrite-default.php on line 196 and exactly 3 expected in ……#13 {main} thrown in /wp-content/plugins/wp-hide-security-enhancer/modules/components/rewrite-default.php on line 181 UPDATE: bug was fixed really fast by developer, all good. This topic was modified 2 years, 3 months ago by itarendus. This topic was modified 2 years, 3 months ago by itarendus.

   Read on wp.org ↗
7. ★★★★★ Namaste

   2.4y ago

   I’ve tested some plugins, and this is the best I found in terms of code quality. I use more than 50 plugins on my site, and with this addition, carefully selecting what to hide, it didn’t break my site. I really recommend the premium version.

   Read on wp.org ↗
8. ★★★★★ bizpopcorn

   2.5y ago

   In addition to the increased security of the site, the overall security of the service is enhanced. It’s a powerful plug-in that can’t be compared.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.8.9 Fix: Return login error, when Google Captcha is active and the captcha field is empty. 2.8.9
2. — Version 2.8.8 Redesigned the Scan interface for improved usability and better UI consistency. Applied minor code adjustments and internal improvements. 2.8.8
3. — Version 2.8.6 New scan functionality ( available in WP Hide PRO ) – AI-Powered Vulnerability Monitoring Fix: 2FA feature, if the option require_setup is active, show the other available methods, so the user can still continue with the 2.8.6
4. — Version 2.8.5 Add a Settings link to the plugin within the Plugins area to make it easier for users to get started with the plugin. Fix the 2FA flow when the “Enforce User to Configure 2FA” option is enabled. Currently, if some 2FA me 2.8.5
5. — Version 2.8.3 Better explain the Scan functionality built on insights generated by our proprietary AI-engineered with advanced models, the scan checks your site against 99.9% of identified security issues and vulnerabilities. 2.8.3
6. — Version 2.8.2 Add AI-powered help to every option to make its purpose easier to understand, with practical examples and usage tips. 2.8.2

3 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 WP Hide & Security Enhancer <= 2.5.1 - Missing Authorization to Unauthenticated Arbitrary File Contents Deletion ↗
   2024-12-05 CVE-2024-11585 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.5.1 Patched in 2.5.2
2. Medium · 6.1 WP Hide & Security Enhancer <= 1.7.9.2 - Reflected Cross-Site Scripting ↗
   2022-08-08 CVE-2022-2538 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.9.2 Patched in 1.8
3. High · 7.5 WP Hide & Security Enhancer <= 1.3.9.2 - Arbitrary File Download ↗
   2017-07-21 Files or Directories Accessible to External Parties Affects <= 1.3.9.2 Patched in 1.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 14 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-03-30 60K+ → 50K+ down after 368 days in tier
2. 2025-03-27 70K+ → 60K+ down after 2 days in tier
3. 2025-03-25 60K+ → 70K+ up after 2 days in tier
4. 2025-03-23 70K+ → 60K+ down after 1 days in tier
5. 2025-03-22 60K+ → 70K+ up after 1 days in tier
6. 2025-03-21 70K+ → 60K+ down after 1 days in tier
7. 2025-03-20 60K+ → 70K+ up after 2 days in tier
8. 2025-03-18 70K+ → 60K+ down after 32 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Security Plugin, Firewall & Malware Scanner with Auto Removal 40K+ installs · 4.7★ · 3 shared tags A
• Login With Ajax – Fast Logins, 2FA, Redirects 10K+ installs · 4.6★ · 3 shared tags A
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 2 shared tags A
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 2 shared tags A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 2 shared tags A
• Loginizer 1M+ installs · 4.8★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for WP Hide & Security Enhancer into a readme, a review or a deck. It updates itself.

WP Hide & Security Enhancer: 50K+ active installs, 4.3★ (275 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wp-hide-security-enhancer