#199 by installs
Limit Login Attempts
Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.
- Installs
- 300,000+
- Rating
- 4.6 (202)
- Updated
- 4 years ago
WPS Limit Login
WPS Limit login limit connection attempts by IP address
- Active installs
- 100,000+
- #314 of 1,000
- Downloads, all time
- 1.1M
- 1,141,017
- Downloads, 30 days
- 23K
- 4.8K in the last 7
- Rating
- 4.9 / 5
- 83 reviews
- Last updated
- 43 days ago
- Sep 18, 2026
- Version
- 1.5.9.4
- 31 releases
Upkeep and compatibility
| Last updated | September 18, 2026Updated in the last 3 months |
|---|---|
| Tested up to | WordPress 7.1.4Covers WordPress 7.1.4, the current release |
| Needs WordPress | 4.2 or newer |
| Needs PHP | Not stated |
| First published | March 2, 2018 |
| Support, last two months | 0 of 1 threads resolved (0%) |
Reviews
4.9 / 5 from 83 reviews
| 5 stars | 79 |
|---|---|
| 4 stars | 3 |
| 3 stars | 0 |
| 2 stars | 0 |
| 1 star | 1 |
Downloads, last 30 days
What the author says it does
Français
Limitez le nombre de tentatives de connexion possibles via la page de connexion et en utilisant les cookies auth.
WordPress par défaut permet des tentatives de connexion illimitées soit via la page de connexion ou en envoyant des cookies spéciaux. Cela permet aux mots de passe (ou hashs) d’être craqués via la force brute relativement facilement.
WPS Limit login limite les tentatives de connexion et bloque l’envoi d’autres tentatives à une adresse Internet après l’atteinte d’une limite spécifiée, ce qui rend une attaque par force brute difficile, voire impossible.
Caractéristiques:
- Limiter le nombre de nouvelles tentatives lors de la connexion (pour chaque IP). Ceci est entièrement personnalisable.
- Limitez le nombre de tentatives de connexion en utilisant des cookies d’autorisation de la même manière.
- Informe l’utilisateur sur les tentatives restantes ou le temps de verrouillage sur la page de connexion.
- Journalisation et notification par courriel facultative.
- Gère le serveur derrière le proxy inverse (reverse proxy).
- Il est possible de mettre en liste blanche / liste noire les adresses IP.
- Compatibilité avec le pare-feu du site Web Sucuri.
- Protection de passerelle XMLRPC.
- Woocommerce protection de la page de connexion.
- Compatibilité multi-sites avec des paramètres MU supplémentaires.
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Latest changelog entry
- Fix vulnerability (Thanks Ananda Dhakal – Patchstack) : Vulnérabilité XSS stockée non authentifiée via un nom d’utilisateur ayant échoué à la connexion dans le journal de verrouillage.
Screenshots
Configuration 
Whitelist 
Blacklist 
Log
Tagged
Plugins that share its tags
#46 by installs
Loginizer
Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
- Installs
- 1+ million
- Rating
- 4.8 (1K)
- Updated
- 2 days ago
#51 by installs
Security Optimizer – The All-In-One Protection Plugin
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
- Installs
- 1+ million
- Rating
- 4.5 (157)
- Updated
- 17 days ago
#312 by installs
Two Factor
Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.
- Installs
- 100,000+
- Rating
- 4.7 (209)
- Updated
- 33 days ago
#401 by installs
Hide My WP Ghost – Security & Firewall
Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA
- Installs
- 100,000+
- Rating
- 4.5 (373)
- Updated
- 1 day ago
#628 by installs
WP fail2ban – Advanced Security
WP fail2ban uses fail2ban to protect your WordPress site.
- Installs
- 60,000+
- Rating
- 4.2 (71)
- Updated
- 11 days ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin. The author takes donations at their donate page.