{"id":117448,"date":"2020-02-20T07:55:14","date_gmt":"2020-02-20T07:55:14","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/wp-limit-failed-login-attempts\/"},"modified":"2025-06-15T19:08:06","modified_gmt":"2025-06-15T19:08:06","slug":"wp-limit-failed-login-attempts","status":"publish","type":"plugin","link":"https:\/\/azb.wordpress.org\/plugins\/wp-limit-failed-login-attempts\/","author":13610376,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"5.6","stable_tag":"5.6","tested":"6.8.5","requires":"4.6","requires_php":"7.2","requires_plugins":null,"header_name":"Limit Login Attempts (Spam Protection)","header_author":"wp-buy","header_description":"Limit the number of retry attempts when logging in per IP. Fully customizable and easy to use.","assets_banners_color":"23355d","last_updated":"2025-06-15 19:08:06","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/www.wp-buy.com","rating":3.9,"author_block_rating":0,"active_installs":200,"downloads":13984,"num_ratings":7,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","changelog"],"tags":{"1.7":{"tag":"1.7","author":"wp-buy","date":"2020-09-23 11:01:49"},"1.8":{"tag":"1.8","author":"osamaesh","date":"2020-10-28 16:59:28"},"2.1":{"tag":"2.1","author":"osamaesh","date":"2020-11-05 09:30:35"},"3.1":{"tag":"3.1","author":"osamaesh","date":"2021-03-28 17:01:49"},"3.2":{"tag":"3.2","author":"osamaesh","date":"2021-04-30 12:17:36"},"4.1":{"tag":"4.1","author":"osamaesh","date":"2021-07-15 10:36:14"},"4.2":{"tag":"4.2","author":"osamaesh","date":"2021-07-17 14:54:44"},"4.3":{"tag":"4.3","author":"osamaesh","date":"2021-08-11 14:14:10"},"4.4":{"tag":"4.4","author":"osamaesh","date":"2021-08-22 10:30:00"},"4.5":{"tag":"4.5","author":"osamaesh","date":"2021-10-10 09:21:22"},"4.6":{"tag":"4.6","author":"osamaesh","date":"2021-11-09 13:53:35"},"4.7":{"tag":"4.7","author":"osamaesh","date":"2021-12-20 10:43:11"},"4.8":{"tag":"4.8","author":"osamaesh","date":"2022-03-01 15:42:27"},"4.9":{"tag":"4.9","author":"osamaesh","date":"2022-03-02 12:13:59"},"4.9.1":{"tag":"4.9.1","author":"osamaesh","date":"2022-03-02 13:40:48"},"5.1":{"tag":"5.1","author":"osamaesh","date":"2023-04-06 12:12:24"},"5.2":{"tag":"5.2","author":"wp-buy","date":"2023-04-09 11:40:43"},"5.3":{"tag":"5.3","author":"osamaesh","date":"2024-02-07 07:20:09"},"5.4":{"tag":"5.4","author":"wp-buy","date":"2024-10-05 04:54:00"},"5.5":{"tag":"5.5","author":"osamaesh","date":"2024-11-02 22:38:16"},"5.6":{"tag":"5.6","author":"wp-buy","date":"2025-06-15 19:08:06"}},"upgrade_notice":[],"ratings":{"1":2,"2":0,"3":0,"4":0,"5":5},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":2247358,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":2247358,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3180531,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.7","1.8","2.1","3.1","3.2","4.1","4.2","4.3","4.4","4.5","4.6","4.7","4.8","4.9","4.9.1","5.1","5.2","5.3","5.4","5.5","5.6"],"block_files":[],"assets_screenshots":{"screenshot-01.png":{"filename":"screenshot-01.png","revision":2573904,"resolution":"1","location":"assets","locale":""},"screenshot-02.png":{"filename":"screenshot-02.png","revision":2573904,"resolution":"2","location":"assets","locale":""},"screenshot-03.png":{"filename":"screenshot-03.png","revision":2573896,"resolution":"3","location":"assets","locale":""},"screenshot-04.png":{"filename":"screenshot-04.png","revision":2573896,"resolution":"4","location":"assets","locale":""},"screenshot-05.png":{"filename":"screenshot-05.png","revision":2573896,"resolution":"5","location":"assets","locale":""},"screenshot-06.png":{"filename":"screenshot-06.png","revision":2573896,"resolution":"6","location":"assets","locale":""},"screenshot-07.png":{"filename":"screenshot-07.png","revision":2646681,"resolution":"7","location":"assets","locale":""}},"screenshots":{"1":"screenshot 1","2":"screenshot 2","3":"screenshot 3","4":"screenshot 4","5":"screenshot 5","6":"screenshot 6","7":"screenshot 7"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[2656,1174,37924,1178,600],"plugin_category":[38],"plugin_contributors":[181722,125473,78387],"plugin_business_model":[],"class_list":["post-117448","plugin","type-plugin","status-publish","hentry","plugin_tags-anti-spam","plugin_tags-firewall","plugin_tags-login-attempts","plugin_tags-protection","plugin_tags-security","plugin_category-authentication","plugin_contributors-mohmmedalagha","plugin_contributors-osamaesh","plugin_contributors-wp-buy","plugin_committers-osamaesh","plugin_committers-wp-buy"],"banners":{"banner":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/banner-772x250.png?rev=3180531","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/icon-128x128.png?rev=2247358","icon_2x":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/icon-256x256.png?rev=2247358","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/screenshot-01.png?rev=2573904","caption":"screenshot 1"},{"src":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/screenshot-02.png?rev=2573904","caption":"screenshot 2"},{"src":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/screenshot-03.png?rev=2573896","caption":"screenshot 3"},{"src":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/screenshot-04.png?rev=2573896","caption":"screenshot 4"},{"src":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/screenshot-05.png?rev=2573896","caption":"screenshot 5"},{"src":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/screenshot-06.png?rev=2573896","caption":"screenshot 6"},{"src":"https:\/\/ps.w.org\/wp-limit-failed-login-attempts\/assets\/screenshot-07.png?rev=2646681","caption":"screenshot 7"}],"raw_content":"<!--section=description-->\n<p>Limit the number of login attempts possible both through normal login as well as using auth cookies.<\/p>\n\n<p>By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.<\/p>\n\n<p>Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.<\/p>\n\n<h3>Basic Features<\/h3>\n\n<ul>\n<li>Limit the number of retry attempts when logging in.<\/li>\n<li>Configurable lockout timings.<\/li>\n<li>Email notification of blocked attempts (Detailed email containing all necessary information).<\/li>\n<li>Notify the user of remaining attempts.<\/li>\n<li>Report containing all blocked attempts.<\/li>\n<li>Whitelist\/Blocklist of IPs (Support IP ranges).<\/li>\n<li>Allow\/Block Countries.<\/li>\n<li>Automatically block IP addresses that exceed limit login attempts<\/li>\n<li>Automatically add IP addresses that exceed blocks limit to the deny list<\/li>\n<li>Send notifications about blocked retry (Email sent to admins)<\/li>\n<li>Inform the user about the remaining retries or lockout time on the login page.<\/li>\n<li>Unlock The Locked users \u2013 Easily unlock the locked admin through the email or dashboard.<\/li>\n<li>Limit the number of retry attempts when logging in per IP.<\/li>\n<li>Limit the number of attempts to log in using cookies.<\/li>\n<li>Optional logging and optional email notification.<\/li>\n<li>Compatible with Google captcha, Captcha Plus &amp; reCaptcha.<\/li>\n<li>Dashboard gives you an overview of your site's security.<\/li>\n<li>Enable or disable the plugin functionality<\/li>\n<li>Enable to disable email notifications<\/li>\n<li>Compatible with latest WordPress version<\/li>\n<li>Woocommerce login page protection.<\/li>\n<li>Wordfence &amp; Sucuri compatibility.<\/li>\n<li>GDPR compliant.<\/li>\n<\/ul>\n\n<h3>Advanced Features (PRO)<\/h3>\n\n<ul>\n<li>All Basic features included.<\/li>\n<li>Save the password that was used by the hacker (Save part of the password and hide the last three digits).<\/li>\n<li>Advanced dashboard gives you an overview of your site's security (Charts for the most important reports).<\/li>\n<li>Block attackers by IP, Country, IP range.<\/li>\n<li>Mobile Application for the admins to follow up the site security (<a href=\"https:\/\/www.wp-buy.com\/wp-content\/uploads\/apps\/login-attempts-app.apk\">Download APK<\/a>).<\/li>\n<\/ul>\n\n<h3>Video Description<\/h3>\n\n<p>[vimeo https:\/\/vimeo.com\/585819426]<\/p>\n\n<h3>Plugin Settings and Reports<\/h3>\n\n<p>[vimeo https:\/\/vimeo.com\/585820422]<\/p>\n\n<!--section=installation-->\n<p>The plugin is simple to install:<\/p>\n\n<ol>\n<li>Download the file <code>wp-limit-failed-login-attempts.zip<\/code>.<\/li>\n<li>Unzip it.<\/li>\n<li>Upload <code>wp-limit-failed-login-attempts<\/code> directory to your <code>\/wp-content\/plugins<\/code> directory.<\/li>\n<li>Go to the plugin management page and enable the plugin.<\/li>\n<li>Configure the options from the <code>Limit Failed Login<\/code> page<\/li>\n<\/ol>\n\n<!--section=changelog-->\n<h4>5.6<\/h4>\n\n<p>Security Bug fixing - part 2<\/p>\n\n<h4>5.5<\/h4>\n\n<p>Security Bug fixing<\/p>\n\n<h4>5.4<\/h4>\n\n<p>Security Bug fixing<\/p>\n\n<h4>5.3<\/h4>\n\n<p>Bug fixing in log report<\/p>\n\n<h4>5.2<\/h4>\n\n<p>Checking with wordpress version 6.2<\/p>\n\n<h4>5.1<\/h4>\n\n<ul>\n<li>Bug fixing in lockout (locked accounts) report (security issiu reported by WPScan) <\/li>\n<\/ul>\n\n<h4>4.9.1<\/h4>\n\n<ul>\n<li>Bug fixing in log report (security issiu reported by WPScan) - part 3<\/li>\n<\/ul>\n\n<h4>4.9<\/h4>\n\n<ul>\n<li>Bug fixing in log report (security issiu reported by WPScan) - part 2<\/li>\n<\/ul>\n\n<h4>4.8<\/h4>\n\n<ul>\n<li>Bug fixing in log report (security issiu reported by WPScan)<\/li>\n<\/ul>\n\n<h4>4.7<\/h4>\n\n<ul>\n<li>Bug fixing in dashboard &amp; email reports<\/li>\n<\/ul>\n\n<h4>4.6<\/h4>\n\n<ul>\n<li>Bug fixing - Use local flags instead of using third party website<\/li>\n<\/ul>\n\n<h4>4.5<\/h4>\n\n<ul>\n<li>Bug fixing - Remote get issue<\/li>\n<\/ul>\n\n<h4>4.4<\/h4>\n\n<ul>\n<li>Bug fixing - PHP notice message<\/li>\n<\/ul>\n\n<h4>4.3<\/h4>\n\n<ul>\n<li>Bug fixing in login attempts counter<\/li>\n<\/ul>\n\n<h4>4.2<\/h4>\n\n<ul>\n<li>Bug fixing in email alerts<\/li>\n<\/ul>\n\n<h4>4.1<\/h4>\n\n<ul>\n<li>Bug fixing in email alerts<\/li>\n<\/ul>\n\n<h4>4.1<\/h4>\n\n<ul>\n<li>Adding statistics page &amp; new statistics widgets<\/li>\n<li>Adding a new feature: Block by IP and Range IP<\/li>\n<li>Bug fixing and enhancements<\/li>\n<\/ul>\n\n<h4>2.8<\/h4>\n\n<ul>\n<li>bug fixing in settings<\/li>\n<\/ul>\n\n<h4>2.7<\/h4>\n\n<ul>\n<li>Compatibility with SMPT plugins<\/li>\n<\/ul>\n\n<h4>2.6<\/h4>\n\n<ul>\n<li>bug fixing in attempts count<\/li>\n<li>bug fixing in email alerts<\/li>\n<\/ul>\n\n<h4>2.5<\/h4>\n\n<ul>\n<li>Bug fixing in a timezone<\/li>\n<li>Bug fixing in the lockout timer<\/li>\n<\/ul>\n\n<h4>2.4<\/h4>\n\n<ul>\n<li>Bug fixing in recording attempts<\/li>\n<\/ul>\n\n<h4>2.3<\/h4>\n\n<ul>\n<li>Bug fixing in the email alerts<\/li>\n<\/ul>\n\n<h4>2.2<\/h4>\n\n<ul>\n<li>improvements in reports<\/li>\n<li>improvements in dashboard widgets<\/li>\n<\/ul>\n\n<h4>2.1<\/h4>\n\n<ul>\n<li>hot fixes in the wp-buy cp page<\/li>\n<\/ul>\n\n<h4>1.9<\/h4>\n\n<ul>\n<li>hot fixes<\/li>\n<li>improvements<\/li>\n<\/ul>\n\n<h4>1.8<\/h4>\n\n<ul>\n<li>Add one starting page for all of our plugins<\/li>\n<li>Add links to dismiss the new start page links<\/li>\n<\/ul>\n\n<h4>1.7<\/h4>\n\n<ul>\n<li>Adding new feature (IP blocking)<\/li>\n<li>Adding new feature (search by IP, country, username)<\/li>\n<li>Adding new feature (show username and password in the log reports)<\/li>\n<\/ul>\n\n<h4>1.6<\/h4>\n\n<ul>\n<li>Bug fixing - PHP Notice -&gt; Undefined index<\/li>\n<\/ul>\n\n<h4>1.5<\/h4>\n\n<ul>\n<li>Adding username and user role to the log<\/li>\n<li>Adding search by username, IP, role, country<\/li>\n<\/ul>\n\n<h4>1.4<\/h4>\n\n<ul>\n<li>Email template improvements<\/li>\n<\/ul>\n\n<h4>1.3<\/h4>\n\n<ul>\n<li>Display GEO location in detail for any blocked IP address<\/li>\n<\/ul>\n\n<h4>1.2<\/h4>\n\n<ul>\n<li>Bug fixing in the user permissions<\/li>\n<li>adding \"Vote\" message<\/li>\n<\/ul>\n\n<h4>1.1<\/h4>\n\n<ul>\n<li>CSS enhancements<\/li>\n<\/ul>\n\n<h4>1.0<\/h4>\n\n<ul>\n<li>First beta release<\/li>\n<\/ul>","raw_excerpt":"Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/117448","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=117448"}],"author":[{"embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/wp-buy"}],"wp:attachment":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=117448"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=117448"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=117448"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=117448"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=117448"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=117448"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}