Skip to content
StaleWP

Replace now Radar no. 20 · Quiet

Login by Auth0

By Auth0

What it does: Adds Auth0 sign-in, including passwordless, social login and single sign-on.

Why it’s listed: It replaces the WordPress login page, so a fault here affects every user. It has had no update for over two years, and WordPress.org warns it has not been tested with the latest three major releases.

View on WordPress.org ↗ Checked Reviewed by Abhishek Deshpande

Active installs
10k+
Last updated
2024-07-12
Tested up to
6.5.14
Rating
3.1 / 5 (18)
Version
4.6.2
Maintainers
2

Is Login by Auth0 still maintained?

It has gone over two years without an update, and it has a second warning sign: replaces the login page.

Quiet: No update for over a year.

Placements are our opinion, based on public evidence. Risk here means a plugin may not get a fix if a problem appears. It doesn’t mean we found a flaw, unless we show an advisory. Going quiet alone never puts a plugin in Replace now.

Updates No release since 2024-07-12. That was 2 yr 4 mo before our check. WordPress.org plugin directory · checked 2026-10-31
Compatibility Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31. WordPress.org plugin directory · checked 2026-10-31
Security 7 public advisories on record. Details are below. wpvulnerability.net · checked 2026-10-31
Reviews The latest 10 reviews average 2.8 stars, against 3.1 overall. 5 of them gave 1 or 2 stars. Newest activity: 2025-03-03. These reviews are clearly lower than the overall score. WordPress.org reviews · checked 2026-10-31
Maintainers 2 listed contributors. No recent support threads. WordPress.org plugin directory · checked 2026-10-31
Usage 4,132 downloads in the last 30 days, including updates. 82.99% of sites run version 4.6. WordPress.org stats · checked 2026-10-31

What to do next

  1. Back up the site, and use a staging copy for any change.
  2. Check Auth0’s current WordPress guidance.
  3. Plan how users will sign in before you change anything.

If it works today, no need to panic, but don’t leave this for long.

Options to compare with Login by Auth0

SAML Single Sign On ↗

SAML single sign-on.

10k+ installs · 4.9 stars · Updated 2026-10-30 · Tested 7.1.4

WP SAML Auth ↗

SAML sign-in for WordPress.

7k+ installs · 4.5 stars · Updated 2026-08-12 · Tested 7.0.8

Two Factor ↗

Consider this if you only need stronger logins, not single sign-on.

100k+ installs · 4.7 stars · Updated 2026-09-28 · Tested 7.1.4

Each listed plugin was updated in the last six months, is tested with WordPress 7.0 or newer, and had no open advisory in WPVulnerability when we checked. We have not tried them ourselves. No one pays to appear here.

Security record

AdvisorySeverityFixed in
CVE-2023-6813 ↗
Cross-site scripting
Medium (6.1) 4.6.1
CVE-2019-20173 ↗
Cross-site scripting
Medium (6.1) 3.11.3
CVE-2020-7947 ↗
Security issue
Critical (9.8) 4.0.0
CVE-2020-5392 ↗
Cross-site scripting
Medium (6.1) 4.0.0
CVE-2020-5391 ↗
Cross-site request forgery
High (8.8) 4.0.0
CVE-2020-6753 ↗
Cross-site scripting
Medium (6.1) 4.0.0
CVE-2020-7948 ↗
Cross-site request forgery
High (8.8) 4.0.0

wpvulnerability.net · checked 2026-10-31

A listed advisory does not mean the current version is exploitable.

Latest reviews

Dates show last activity. Titles are written by WordPress.org users.

Also on this radar: Login and access

No one can pay to appear on the radar or to change a placement. How we stay independent

Something wrong, or updated since we checked? Suggest a correction

StaleWP Newsletter

What changed in the plugin directory, twice a month. Free, unsubscribe anytime.

See how we handle your email on our Legal page.