by Lester Chan 3.7 (27 reviews)

WP-Ban

Name: WP-Ban
Rating: 3.7 (27 reviews)
Author: Lester Chan

Ban users by IP, IP range, host name, user agent and referrer URL from visiting your WordPress blog.

WP-Ban ranks #2,371 among WordPress.org plugins with 8,000+ active installations, is #76 of 2,168 in the Analytics category, a 3.7/5 rating from 27 reviews, and was last updated Aug 10, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7.0.8 (Current: 7.1.4)

v2.0.0 Current Version v2.0.0

Updated 2 months ago Last Update on 10 Aug, 2026

Refreshed 6 days ago Last Refreshed on

#76 of 2,168 in Analytics Top 5% by installs Downloads -39.1% this week

View on WordPress.org

Rank

#2,371

— No change

Active Installs

8K+

-9.1%

KW Avg Position

18.8

0.4 better

Downloads

333.4K

+17 today

Support Resolved

— No change

Rating

74%

Review 3.7 out of 5

3.7 (27 reviews)

Next Milestone 9K

Total Progress 75%

8K+ 9K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 250 more installs to reach 9K+

Rank Changes

Current #2,371

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

3.7

27 reviews

Overall 74%

16 (59%)

2 (7%)

0 (0%)

2 (7%)

7 (26%)

Security History

Source: WPVulnerability

4 known vulnerabilities on record · 0 in the last 24 months · checked 1 month ago

Dec 21, 2022

WP-Ban [wp-ban] < 1.69.1 (closed)

CVE-2022-4631 · Fixed in v1.69.1
Dec 18, 2022

WP-Ban [wp-ban] < 1.64 (closed)

CVE-2021-4252 · Fixed in v1.64
Dec 6, 2022

WP-Ban [wp-ban] < 1.69.1 (closed)

CVE-2022-4260 · Fixed in v1.69.1
Sep 4, 2014

WP-Ban [wp-ban] < 1.64 (closed)

CVE-2014-6230 · Fixed in v1.64

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 2.0.0
Last Updated: Aug 10, 2026
Requires WP: 6.8+
Tested Up To: 7.0.8
PHP Version: 8.2 or higher
Author: Lester Chan

Support & Rating

Rating: ★ ★ ★ ★ ☆ 3.7
Reviews: 27
Support Threads: 0
Resolved: 0%

Keywords

ban bots hostname ip referrer

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,015

Site Kit by Google – Analytics, Search Console, AdSense, Speed

5M+ installs

MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)

GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

700K+ installs

#83

Header Footer Code Manager

600K+ installs

#105

WP Statistics – Simple, privacy-friendly Google Analytics alternative

500K+ installs

#112

GA Google Analytics – Connect Google Analytics to WordPress

View all Analytics plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site administrators who want to block unwanted visitors from accessing their blog. It bans users by IP, IP range, host name, user agent, or referrer URL, showing a custom message to banned visitors while tracking their visit attempts.

Ban by IP address
Ban by IP range
Ban by host name
Ban by user agent
Ban by referrer URL
Custom ban message display
Exclude IPs from banning
Wildcard matching support

Frequently Asked Questions

Common questions about WP-Ban

Nowhere — they were moved, not lost. WP-Ban used to keep its settings in eight separate rows in the options table, under names with no plugin prefix on them at all. 2.0.0 consolidates them into one row called wp_ban_options. The move runs automatically the first time an administrator loads wp-admin after the update, and it also repairs two long-standing storage faults on the way through (see the changelog). An IP range I entered was rejected A range must be two valid addresses of the same type, separated by a hyphen, with no wildcards — 192.168.1.1-192.168.1.255 or 2001:db8::1-2001:db8::ffff. Anything else is refused at save time and the screen says which entry it dropped. Before 2.0.0 a malformed range was accepted and then matched every visitor, so if you had one stored, everybody was being banned.

%SITE_NAME%, %SITE_URL%, %USER_IP%, %USER_HOSTNAME%, %USER_ATTEMPTS_COUNT% and %TOTAL_ATTEMPTS_COUNT%. Your message must sit inside <div id="wp-ban-container"></div> so the preview button can find it.

Three rows: wp_ban_options for the settings, wp_ban_version for the version it last ran, and wp_ban_stats for the attempt counters. Only the first two are autoloaded. Deleting the plugin from the Plugins screen removes all three, and every pre-2.0.0 row as well.