Replace now Radar no. 01 · Quiet

Limit Login Attempts

What it does: Limits repeated login attempts from the same IP address.

Why it’s listed: It guards the login page, and it has had no update for over three years. A separate plugin, Limit Login Attempts Security, has a nearly identical name, so check which one you actually run. It is tested only up to WordPress 6.2, and login protection is a job where you want a plugin that keeps pace with WordPress.

View on WordPress.org ↗ Checked 2026-10-31 Reviewed by Abhishek Deshpande

Active installs: 300k+
Last updated: 2023-04-04
Tested up to: 6.2.15
Rating: 4.6 / 5 (202)
Version: 1.7.2
Maintainers: 1

Is Limit Login Attempts still maintained?

It has gone over two years without an update, and it has a second warning sign: guards the login page.

Quiet: No update for over a year.

Placements are our opinion, based on public evidence. Risk here means a plugin may not get a fix if a problem appears. It doesn’t mean we found a flaw, unless we show an advisory. Going quiet alone never puts a plugin in Replace now.

Updates No release since 2023-04-04. That was 3 yr 7 mo before our check. WordPress.org plugin directory · checked 2026-10-31

Compatibility Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31. WordPress.org plugin directory · checked 2026-10-31

Security 3 past advisories, all listed as fixed. CVE-2023-40666 is reserved with no published details, so we do not count it. wpvulnerability.net · checked 2026-10-31

Reviews The latest 10 reviews average 4.8 stars, against 4.6 overall. None of them gave 1 or 2 stars. Newest activity: 2025-03-15. We see no negative trend. WordPress.org reviews · checked 2026-10-31

Maintainers 1 listed contributor. No recent support threads. WordPress.org plugin directory · checked 2026-10-31

Usage 7,522 downloads in the last 30 days, including updates. 99.97% of sites run version 1.7. WordPress.org stats · checked 2026-10-31

What to do next

Back up the site, and use a staging copy for any change.
Try one of the alternatives below, then remove this plugin.

If it works today, no need to panic, but don’t leave this for long.

Recommended alternatives to Limit Login Attempts

Limit Login Attempts Security ↗

The closest match, with the same core job.

1M+ installs · 4.8 stars · Updated 2026-09-23 · Tested 7.1.4

Loginizer ↗

Brute-force login protection.

1M+ installs · 4.8 stars · Updated 2026-10-29 · Tested 7.1.4

Wordfence Security ↗

A wider security plugin that includes login protection.

5M+ installs · 4.7 stars · Updated 2026-09-30 · Tested 7.1.4

Each listed plugin was updated in the last six months, is tested with WordPress 7.0 or newer, and had no open advisory in WPVulnerability when we checked. We have not tried them ourselves. No one pays to appear here.

Security record

Advisory	Severity	Fixed in
CVE-2023-1861 ↗ Cross-site scripting	Medium (5.4)	1.7.2
CVE-2023-1912 ↗ Cross-site scripting	Medium (6.1)	1.7.2
CVE-2012-10001 ↗ Login protection bypass	Critical (9.8)	1.7.1

wpvulnerability.net · checked 2026-10-31

A listed advisory does not mean the current version is exploitable.

Latest reviews

5/5 Indispensable Plugin! Vital to the health of my site! 2025-03-15
5/5 Love this plugin 2023-12-03
5/5 Exactly what is should be 2023-10-01
5/5 Interesante 2020-12-30
4/5 Not maintained but still works 2020-04-29

Dates show last activity. Titles are written by WordPress.org users.

Also on this radar: Login and access

Audit Trail Replace now
WP Hardening Replace now
Login by Auth0 Replace now
Lockdown WP Admin Replace now
Password Strength Settings for WooCommerce Replace now
Spider Blocker Plan a move

No one can pay to appear on the radar or to change a placement. How we stay independent

Something wrong, or updated since we checked? Suggest a correction