Plugin Pulse
← Pulse

WPS Hide Login

by Remy Perona · Login & Users

Also makes 2 other plugins · 2.0M+ installs across the portfolio →

Change wp-login.php to anything you want.

How scoring works →
83 Health · B
Maintenance 100/100
Rating quality 97/100
Support 38/100

83 health vs 59 average across 1,440 Login & Users plugins

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

88 / 100

Excellent listing optimization

Biggest win: Support resolution

Update recency 100/100
WP compatibility 100/100
Rating quality 96/100
Listing tuning 100/100
Support resolution 22/100

To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.

Get the full rank-higher report →

Daily downloads

Since 2022-10-05 · 1,421 days · wp.org + Plugin Pulse archive

+666% vs prior 30d
24.7KDownloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

975.2K

now · peak 3.7M

972.6K30d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

WPS Hide Login · #27 you Rename wp-login.php · #9016 LoginPress · #219 Custom Login Page Cu · #492

Rating trend

Star average over time · dips mark rough releases

4.8Stars · Aug 26

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

486per 1k installs · Aug 26

Release cadence

Occasionally updated
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

1

releases in the last 12 months

8mo ago

latest release · v1.9.18

87

tagged releases on record

Recent releases

1.9.18 · 8mo ago1.9.17.2 · 1.4y ago1.9.17.1 · 1.9y ago1.9.17 · 1.9y ago1.9.16.7 · 2.2y ago1.9.16.6 · 2.2y ago1.9.16.5 · 2.2y ago1.9.16.4 · 2.2y ago1.9.16.3 · 2.2y ago1.9.16.2 · 2.2y ago1.9.16.1 · 2.2y ago1.9.16 · 2.2y ago1.9.15.2 · 2.4y ago1.9.15.1 · 2.4y ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 98% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v1.9 98%
Older / other versions 2.3%

Estimated active installs

The public count shows “2M+”. Our estimate pins where the real number sits.

tracked estimate
2M–3M ≈2.9M

Refined from the date this plugin crossed into its current band.

Install history · since 2015-09-06 · 1,480 observations

2MInstalls · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Details

Version
1.9.19
Last updated
12d ago
Added
2015-04-23 · 11 yrs old
Requires WP
4.1
Tested up to
7.1
Requires PHP
7.0

Recent review vibe

read from the latest 12 reviews to 2026-06-03
Positive PraisePerformanceFeature requests

Reviewers like how fast the setup is and say it cuts bot login attempts without slowing the site, though a few want more settings and one says the hidden URL got found within hours.

Recent reviews

All reviews on wp.org ↗
  1. rebeca18
    3mo ago

    Does exactly what it says. Setup took 30 secs, no brainer. Only thing is it doesn’t block attacks fully, just hides the url. Not a complete security solution but still pretty useful tbh

    Read on wp.org ↗
  2. Hakeem
    3mo ago

    Was getting tons of spam logins everyday. Installed this & changed my url in 1 min. Bots r completely gone cz they cant find the login page anymore! Super light so no site slowdown. Feeling way safer tbh.

    Read on wp.org ↗
  3. treyvon1
    3mo ago

    checked my server logs after a brute force scare wp-login.php was getting hammered nonstop. installed this, set a custom url & the hits went dead. sleep better now lol. on every site frm now on

    Read on wp.org ↗
  4. urmirun
    4mo ago

    Good for changing the login URL fast. It worked for me, cz bots slowed down a bit. But settings are very limited, so I’d say it’s useful, not perfect.

    Read on wp.org ↗
  5. jazmyn30
    4mo ago

    Nice small plugin for hiding the default login page. Setup was quick and it worked right away. Not many options, but for basic use it’s pretty good.

    Read on wp.org ↗
  6. iyanasoria4
    4mo ago

    Easy to set up and it works fine for hiding the login page. Gave me some peace of mind. But it feels very basic and I wish it had a few more useful settings.

    Read on wp.org ↗
  7. tyriqsuth
    4mo ago

    WPS Hide Login is easy to set up and does the basic job. Changed the login URL without hassle. But not much control or extra features. Felt a bit too simple for full security needs.

    Read on wp.org ↗
  8. seamusrider
    5mo ago

    Works well for hiding the login URL. Setup was easy, no issues so far. Helps a bit with security, cz bots can’t find wp-login easily. Not super advanced, but it does the job. tnkz devs

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. Version 1.9.18 Tested up to 6.9 Fix early translation loading (Thanks @mondalaci) 1.9.18
  2. Version 1.9.17.2 Tested up to 6.8 1.9.17.2
  3. Version 1.9.17.1 Fix link dashboard in admin network > sites 1.9.17.1
  4. Version 1.9.17 Tested up to 6.6 Fix link dashboard in admin network > sites 1.9.17
  5. Version 1.9.16.7 Fix Fatal Error with BuddyBoss 1.9.16.7
  6. Version 1.9.16.6 Fix Fatal Error with BuddyBoss Platform 1.9.16.6

Known vulnerabilities

via Wordfence Intelligence

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

  1. 2024-06-24 CVE-2024-6289 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.9.16.3 Patched in 1.9.16.4
  2. 2024-06-10 CVE-2024-2473 Incorrect Authorization Affects <= 1.9.15.2 Patched in 1.9.16
  3. 2024-01-10 CVE-2023-49748 Protection Mechanism Failure Affects <= 1.9.11 Patched in 1.9.12
  4. 2021-10-27 CVE-2021-24917 Incorrect Authorization Affects <= 1.9.0 Patched in 1.9.1
  5. 2020-01-27 CVE-2020-36710 Incorrect Authorization Affects <= 1.5.4.2 Patched in 1.5.5
  6. 2019-07-23 CVE-2019-15825 Protection Mechanism Failure Affects <= 1.5.2.2 Patched in 1.5.3
  7. 2019-07-23 CVE-2019-15826 Protection Mechanism Failure Affects <= 1.5.2.2 Patched in 1.5.3
  8. 2019-07-23 CVE-2019-15823 Improper Authorization Affects < 1.5.3 Patched in 1.5.3
  9. 2019-07-22 CVE-2019-15824 Protection Mechanism Failure Affects <= 1.5.2.2 Patched in 1.5.3
  10. 2015-04-27 CVE-2015-9498 Cross-Site Request Forgery (CSRF) Affects < 1.1 Patched in 1.1

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Low memory footprint
Low page-speed impact
Runs on latest PHP + WP
No PHP errors
No JS errors
Activates cleanly
No resource errors
No external HTTP errors
Optimized database use
Frequently updated

Languages

via translate.wordpress.org

Translated into 72 languages, 24 at 90% or more

Chinese (Taiwan) 100%
Croatian 100%
Czech 100%
Dutch 100%
Dutch (Belgium) 100%
Dutch (Formal) 100%
English (UK) 100%
Galician 100%
Korean 100%
Persian 100%
Polish 100%
Portuguese (Brazil) 100%
Slovak 100%
Spanish (Argentina) 100%
Spanish (Chile) 100%
Spanish (Mexico) 100%
Spanish (Spain) 100%
Swedish 100%
Turkish 100%
German 96%
Ukrainian 96%
French (France) 93%
German (Formal) 90%
Lithuanian 90%

Plus 48 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2025-09-16 1M+ → 2M+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for WPS Hide Login into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/wps-hide-login" width="480" height="300" style="border:0" loading="lazy" title="WPS Hide Login — Plugin Pulse"></iframe>
Preview card ↗

WPS Hide Login: 2M+ active installs, 4.8★ (2,111 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wps-hide-login