Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms Review - In-Depth Analysis
Protect your WordPress website from brute force attacks by limiting the number of failed login attempts. Improve security and stop bots.
Performance Overview
User Rating
4.6/5 (based on 37+
reviews)
Active Installations
4,000+
Update Frequency
Below Average
It is calculated using the weighted average of same category
plugins.
Security Score
6.53 / 10
(Medium Risk)
It is calculated using the weighted average of all versions.
What It Does
Limit Attempts is a powerful WordPress security plugin that protects your site from brute-force attacks and bot logins. It limits the number of failed login attempts per user and blocks IP addresses for a configurable time period based on your settings.
You can manage deny and allow lists, receive email alerts, and hide login or contact forms from blocked users. This plugin offers seamless protection without the need for coding and is compatible with other BestWebSoft security tools.
Shield your site against automated attacks and unauthorized access today.
Comparing to Alternatives
Limit Attempts by BestWebSoft is a solid choice among WordPress login security plugins, offering effective brute force protection with some unique features. It competes well with other popular plugins in this category.
Strengths
- Highly effective at stopping repeated login attempts
- User-friendly and easy to configure
- Sends notifications on suspicious activity
- Has a pro version with additional features
- Good track record with regular updates
Weaknesses
- Has had multiple security vulnerabilities in the past
- Security risk score is moderately high
- Some users may prefer more frequent updates
- Limited 4-star reviews compared to 5-star
User Sentiment Analysis
With a strong 4.6 out of 5 rating from 37 reviews, most users praise the plugin's effectiveness and ease of use. Negative feedback is minimal and does not highlight significant issues.
Positive highlights
- "Stopped Login Attempts for My Site" - MOTWGUY
- "Very easy to use" - hepae002
- "Great plugin" - Krzysztof
- "Very impressed!" - Quaint & Fabled
- "Install this plug-in now, pokoke apiklah" - Ikal
Weaknesses
- Past security vulnerabilities may concern cautious users
- Moderate security risk score suggests vigilance is needed
- No recent 4-star reviews, indicating polarized ratings
Who Should Use This?
Best for
Users looking for a straightforward, effective plugin to prevent brute force login attempts with easy setup and notification features.
Not ideal for
Those who require the highest security standards without any history of vulnerabilities or who prefer plugins with a longer track record of flawless security.
Pricing & Value
Free version includes
The free version offers essential brute force protection, login attempt limits, and notification features sufficient for most users.
Pro version
The pro version includes advanced features such as enhanced security options, detailed reports, and priority support.
Final Verdict
Limit Attempts by BestWebSoft is a reliable and user-friendly plugin that effectively protects WordPress sites from brute force attacks. Its high user ratings and positive feedback highlight its ease of use and practical functionality. The availability of a pro version adds value for users seeking more advanced features.
However, the plugin's history of security vulnerabilities and a moderate risk score suggest that users should keep it updated and monitor security advisories closely. Overall, it is a strong contender among login security plugins, especially for users prioritizing ease of use and effective basic protection.
Other Notable Features
Here are a few other notable features of this free
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms plugin.
FAQ
These control how and when to block users, send notifications, and integrate with other plugins:
* “Lock options”: Set how long IPs are blocked and after how many failed attempts.
* “Block options”: Add IPs to deny list after multiple blocks.
* “Block message”: Customize messages shown to blocked users.
* “Send mail”: Enable email alerts to admins.
* “Email message”: Customize email templates.
* “Htaccess plugin”: Sync deny list with .htaccess.
* “Captcha”: Consider incorrect captcha as failed login.
Under the “Blocked addresses” tab, along with unblock time and manual unblock option.
Use the “Deny list” or “Allow list” tabs. You can input single IPs, ranges, or masks.
Use the search field in the respective list tab to find related entries.
Go to the “Log” tab. You’ll see IPs, failed attempts, blocks, and current status.
Go to the “Blocked addresses” tab, hover over the IP, and click “Reset block.” For multiple IPs, use bulk action.
Deny list takes priority and the user will be blocked.
- Log in from another IP and remove yours.
- Use a proxy/VPN to access and unblock.
- Use database access to remove your IP from the
lmtttmpts_blacklist table (advanced users only).
Check:
* Notifications are enabled in settings
* Correct email entered
* Emails aren’t going to spam
* Hosting isn’t blocking outgoing mail
This may happen when sending emails is enabled. It doesn’t affect plugin performance.
These control how and when to block users, send notifications, and integrate with other plugins:
* “Lock options”: Set how long IPs are blocked and after how many failed attempts.
* “Block options”: Add IPs to deny list after multiple blocks.
* “Block message”: Customize messages shown to blocked users.
* “Send mail”: Enable email alerts to admins.
* “Email message”: Customize email templates.
* “Htaccess plugin”: Sync deny list with .htaccess.
* “Captcha”: Consider incorrect captcha as failed login.
Contributors and developers
“Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms”
is open source software. The following people have
contributed to this plugin.
