Active installations200Adoption metric — not a quality score
WordPress.org rating3.9 / 5 from 7 ratings
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Limit Login Attempts (Spam Protection) version 5.6 as active, updated 1y ago and tested up to WordPress 6.8.
Overview
About this plugin
Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Basic Features
Limit the number of retry attempts when logging in.
Configurable lockout timings.
Email notification of blocked attempts (Detailed email containing all necessary information).
Notify the user of remaining attempts.
Report containing all blocked attempts.
Whitelist/Blocklist of IPs (Support IP ranges).
Allow/Block Countries.
Automatically block IP addresses that exceed limit login attempts
Automatically add IP addresses that exceed blocks limit to the deny list
Send notifications about blocked retry (Email sent to admins)
Inform the user about the remaining retries or lockout time on the login page.
Unlock The Locked users – Easily unlock the locked admin through the email or dashboard.
Limit the number of retry attempts when logging in per IP.
Limit the number of attempts to log in using cookies.
Optional logging and optional email notification.
Compatible with Google captcha, Captcha Plus & reCaptcha.
Dashboard gives you an overview of your site’s security.
Enable or disable the plugin functionality
Enable to disable email notifications
Compatible with latest WordPress version
Woocommerce login page protection.
Wordfence & Sucuri compatibility.
GDPR compliant.
Advanced Features (PRO)
All Basic features included.
Save the password that was used by the hacker (Save part of the password and hide the last three digits).
Advanced dashboard gives you an overview of your site’s security (Charts for the most important reports).
Block attackers by IP, Country, IP range.
Mobile Application for the admins to follow up the site security ( Download APK ).
Video Description
Plugin Settings and Reports
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
anti spam
login attempts
firewall
protection
security
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 6.8
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 6.8.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to6.8
Minimum requirementsWordPress 4.6 · PHP 7.2
Update activity15 Jun 20251y ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
