Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records 360 Orbit Login Guard version 1.0.18 as active, updated 20d ago and tested up to WordPress 7.1.
Overview
About this plugin
php.
Rate limiting: locks an IP address out after too many failed attempts, for a configurable duration.
Login history (7 days): every attempt with a pseudonymous fingerprint instead of the raw IP address, success or failure, and the user name tried (only readable if the account exists).
Generic error messages: never reveals whether a user name exists.
Safe allowlist behaviour: an IP address from which someone with administrator rights recently signed in successfully is only locked out after ten times the usual number of failed attempts, so a few typos never lock you out.
Disable XML-RPC: closes the known bypass of rate limiting via system.multicall.
Protection against user name enumeration (?author= parameter and the public REST user list).
Hidden trap field in the login form: bots that fill in every field are rejected, whatever the password is.
A notice if an account is called admin, administrator or test, because attackers try these names first.
Export and import of all settings as JSON, to set up several sites the same way.
WP-CLI: inspect the status and unlock IP addresses even when wp-admin itself is unreachable.
Free version vs. Pro
The free version is complete on its own: rate limiting, login history, generic error messages, XML-RPC and enumeration protection, and settings export/import.
Login Guard Pro adds:
Two-factor authentication (TOTP) for individual accounts or entire roles, compatible with common authenticator apps.
A custom login URL instead of /wp-login.php, with a 404 for the real address.
Notification when an account signs in from an unknown device.
A fixed allow/block list for IP addresses.
Automatic update notifications directly in the WordPress admin.
Login Guard Pro is a separate plugin available from the author; it is not required to use the free version.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
brute force
limit login attempts
security
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 6.4 · PHP 8.1
Update activity12 Oct 202620d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
Version1.0.17→1.0.18
Version1.0.16→1.0.17
Version1.0.15→1.0.16
Version1.0.13→1.0.15
WordPress compatibility7.1.2→7.1.3
Version1.0.12→1.0.13
Version1.0.11→1.0.12
Version1.0.10→1.0.11
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
