/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ WP Limit Login Attempts

WP Limit Login Attempts

By Arshid

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

WP Limit Login Attempts Review - In-Depth Analysis

Protect your site from brute force attacks by limiting login attempts. This plugin blocks IPs temporarily and includes captcha verification.

Performance Overview

WPS Score

6.84/10

User Rating

4.6/5 (based on 300+ reviews)

Active Installations

10,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

WP Limit Login Attempts is a security plugin designed to protect your site from brute force attacks. It limits the rate of login attempts and temporarily blocks IP addresses that exceed the allowed number of attempts. This helps to prevent unauthorized access to your site.

The plugin includes captcha verification to detect and block bots. It is lightweight and easy to use, making it an essential tool for enhancing your site's security.

Additionally, the plugin is GDPR compliant, ensuring that all logged IPs are obfuscated. With features like redirecting to the home page on abnormal requests, it effectively stops hacking attempts.

Comparing to Alternatives

WP Limit Login Attempts is a popular plugin in the login security category with several alternatives available offering similar brute force protection features.

Top alternatives

Strengths

High user rating with majority 5-star reviews
Simple and effective brute force protection
No paid version required to use core features
Lightweight and easy to configure
Regular updates addressing security issues

Weaknesses

Known medium severity IP spoofing vulnerability with no fix yet
Some users report lack of advanced features without a pro version
Security risk score indicates moderate risk history
Limited feature set compared to some alternatives

User Sentiment Analysis

With a strong 4.6 average rating from 300 users, most feedback is positive highlighting ease of use and reliability, though a small minority express dissatisfaction.

Positive highlights

'Simple and worked' - mcoino
'Works as it should with no problems. Highly recommended.' - rvjenterprises
'Works nicely, thanks!' - lukasdobes
'Sehr gut. Es lohnt sich.' - merovci
'helemaal goed' - gertjan1954

Common complaints

Plugin is useless without paying for a pro version

Weaknesses

Security vulnerabilities noted in past versions
Limited advanced features in free version
Some users expect a pro version that is not available

Who Should Use This?

Best for

Users seeking a straightforward, free plugin to limit login attempts and protect against brute force attacks without needing advanced features.

Not ideal for

Those requiring advanced security features or guaranteed vulnerability-free solutions may find this plugin insufficient due to known past vulnerabilities and lack of a pro version.

Pricing & Value

Free version includes

The free version includes core functionality to limit login attempts and basic brute force protection without restrictions.

Final Verdict

WP Limit Login Attempts is a well-rated plugin offering essential brute force protection with a simple setup and no cost for core features. It is favored for its ease of use and effectiveness by the majority of users.

However, the plugin has a moderate security risk history with known vulnerabilities and lacks a pro version, which may limit its appeal for users needing advanced security features or guaranteed fixes. Alternatives may better suit those needs.

Other Notable Features

Here are a few other notable features of this free WP Limit Login Attempts plugin.

brute force attack

captcha verification

Screenshots

FAQ

You are tried to login with wrong password or username more than five times.
So please wait 10 minutes, then reset password by clicking “lost your password” link.