by bestwebsoft 4.6 (37 reviews)

Limit Attempts by BestWebSoft - WordPress Anti-Bot and Security Plugin for Login and Forms

Name: Limit Attempts by BestWebSoft - WordPress Anti-Bot and Security Plugin for Login and Forms
Rating: 4.6 (37 reviews)
Author: bestwebsoft

Protect your WordPress website from brute force attacks by limiting the number of failed login attempts. Improve security and stop bots.

Limit Attempts by BestWebSoft ranks #3,546 among WordPress.org plugins with 4,000+ active installations, is #285 of 4,488 in the Security category, a 4.6/5 rating from 37 reviews, and was last updated Jan 9, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.8 (Current: 7.1)

v1.3.2 Current Version v1.3.2

Updated 8 months ago Last Update on 09 Jan, 2026

Refreshed 9 hours ago Last Refreshed on

#285 of 4,488 in Security Top 5% by installs

View on WordPress.org

Rank

#3,546

-1 this week

Active Installs

4K+

-12.3%

KW Avg Position

— No change

Downloads

191.2K

+5 today

Support Resolved

— No change

Rating

92%

Review 4.6 out of 5

4.6 (37 reviews)

Next Milestone 5K

Total Progress 41.5%

4K+ 5K+

279

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 585 more installs to reach 5K+

Rank Changes

Current #3,546

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.6

37 reviews

Overall 92%

33 (89%)

0 (0%)

1 (3%)

2 (5%)

Security History

Source: WPVulnerability

5 known vulnerabilities on record · 0 in the last 24 months · checked 2 days ago

Mar 28, 2024

Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms [limit-attempts] < 1.3.0

CVE-2024-30439 · Fixed in v1.3.0
May 16, 2017

Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms [limit-attempts] < 1.1.8

CVE-2017-2171 · Fixed in v1.1.8
Apr 12, 2017

Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms [limit-attempts] < 1.1.8

Fixed in v1.1.8
Oct 9, 2015

Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms [limit-attempts] < 1.1.1

CVE-2015-9335 · Fixed in v1.1.1
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms [limit-attempts] < 1.1.8

Fixed in v1.1.8

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.3.2
Last Updated: Jan 09, 2026
Requires WP: 6.2+
Tested Up To: 6.8
PHP Version: N/A
Author: bestwebsoft

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.6
Reviews: 37
Support Threads: 0
Resolved: 0%

Keywords

failed attempts limit attempts limit login attempts login security

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to protect login and other forms from unauthorized access. It solves brute-force and bot login attacks by limiting failed login attempts and blocking or denylisting offending IP addresses.

Blocks IPs after failed logins
Manage deny and allow lists
Compatible with Contact Form
Hides forms for blocked IPs
Adds denylisted IPs to .htaccess
Captcha treats wrong entries as failures
Login attempt statistics view
Custom error messages

Frequently Asked Questions

Common questions about Limit Attempts by BestWebSoft - WordPress Anti-Bot and Security Plugin for Login and Forms

These control how and when to block users, send notifications, and integrate with other plugins: * "Lock options": Set how long IPs are blocked and after how many failed attempts. * "Block options": Add IPs to deny list after multiple blocks. * "Block message": Customize messages shown to blocked users. * "Send mail": Enable email alerts to admins. * "Email message": Customize email templates. * "Htaccess plugin": Sync deny list with .htaccess. * "Captcha": Consider incorrect captcha as failed login.

Under the "Blocked addresses" tab, along with unblock time and manual unblock option.

Use the "Deny list" or "Allow list" tabs. You can input single IPs, ranges, or masks.

Use the search field in the respective list tab to find related entries.

Go to the "Log" tab. You’ll see IPs, failed attempts, blocks, and current status.

Go to the "Blocked addresses" tab, hover over the IP, and click "Reset block." For multiple IPs, use bulk action.

Deny list takes priority and the user will be blocked.

Log in from another IP and remove yours. Use a proxy/VPN to access and unblock. Use database access to remove your IP from the lmtttmpts_blacklist table (advanced users only).

Check: * Notifications are enabled in settings * Correct email entered * Emails aren’t going to spam * Hosting isn’t blocking outgoing mail

This may happen when sending emails is enabled. It doesn't affect plugin performance.