Plugin profile · observed daily since 02 Aug 2026
XO Security
Active installs30,000+ rounded
Current authorishitaka
Owner changesNone while we have been watching
Last release4 months ago 19 Jul 2026
Support— no recent threads
Releases on record83
Rating5.0 /5 · 11
Added to directory18 Jan 2016
Requires WP6.0
Requires PHP7.2
Version lag0.1 behind
Tested up toWP 7.0.8 WordPress is now on 7.1
PluginsPedia reports published data and observable changes. It does not rate plugin quality or safety, infer intent, or make recommendations. These are observations rather than a verdict. How this works
Ownership
Held by ishitaka throughout, with no change of ownership observed since daily tracking began on 02 Aug 2026.
Full observed history, including every field transition
Committing accounts
Read from the plugin’s public release log, so these predate this registry. A committing account is not an owner. Thirty accounts commit to WooCommerce and it has never changed hands.
| Account | Releases | First | Last |
|---|---|---|---|
| ishitaka | 83 | 07 Feb 2017 | 19 Jul 2026 |
This registry did not observe a transfer; it read these names off a public log. Whether that reflects a change of ownership is not something the directory publishes.
Adoption
How widely the plugin is installed, and what the people running it think of it. WordPress.org rounds install figures to one significant digit, so they describe an order of magnitude rather than a headcount.
Widely adopted: 30,000+ active installs. Among the more broadly installed plugins in the directory.
190 downloads a day over the last 7 days, falling 37% against the 7 days before. Downloads are counted exactly and without a ceiling, so they show movement the rounded install figure cannot.
11 Sep 2026peak 734/day31 Oct 2026
Daily record
Every field we record, one column per observation. Fields that never moved are named once rather than repeated across every column. A row of identical numbers would be padding.
| Field | 18 Oct | 19 Oct | 20 Oct | 21 Oct | 22 Oct | 23 Oct | 24 Oct | 25 Oct | 26 Oct | 27 Oct | 28 Oct | 29 Oct | 30 Oct | 31 Oct |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Downloads that day | — | 57 | 113 | 130 | 538 | 734 | 444 | 183 | 234 | 244 | 0 | 245 | 242 | 183 |
Unchanged throughout: ratings total (11) · active installs (30,000+) · version (3.11.0) · support threads (0) · threads resolved (0)
91 days of observation, most recent 14 shown.
Maintenance
When it was last released, and how far its declared compatibility has drifted from current WordPress.
Added to directory10 years ago 18 Jan 2016
Requires WP6.0
Requires PHP7.2
Version lag0.1 behind
Is anyone still maintaining this?
- Last released 19 Jul 2026, 112 days ago.
- Declares compatibility only up to WordPress 7.0.8, while 7.1 is current. The author has not confirmed it runs on the last 1 release.
- The same account maintains 4 other plugins; the most recent update to any of them was 18 Apr 2026.
A plugin that does one thing correctly may need no changes for years; a long gap is not, by itself, evidence of neglect.
History
Everything dated that this registry holds about the plugin, most recent first. Releases carry the author’s own release date; everything else is dated to when it was observed.
Entries marked from the release log predate this registry, and daily observation began 02 Aug 2026. They were read from the plugin’s public SVN history after the fact, not watched as they happened. Everything else was observed directly.
- 02 Aug 20263 months agoFirst observed by PluginsPediaDaily snapshots of this plugin’s directory record begin here. Everything above this line is observed; anything before it comes from fields the API itself reports.
- 19 Jul 20264 months agoVersion 3.11.0 released
- 12 Apr 20267 months agoVersion 3.10.9 releasedfrom the release logCommitted by ishitaka.
- 06 Dec 202511 months agoVersion 3.10.8 releasedfrom the release logCommitted by ishitaka.
- 28 Nov 202511 months agoVersion 3.10.7 releasedfrom the release logCommitted by ishitaka.
- 25 Nov 202511 months agoVersion 3.10.6 releasedfrom the release logCommitted by ishitaka.
- 23 Nov 202511 months agoVersion 3.10.5 releasedfrom the release logCommitted by ishitaka.
- 19 Apr 202519 months agoVersion 3.10.4 releasedfrom the release logCommitted by ishitaka.
- 15 Apr 20242.5 years agoVersion 3.10.3 releasedfrom the release logCommitted by ishitaka.
- 11 Apr 20242.5 years agoVersion 3.10.1 releasedfrom the release logCommitted by ishitaka.
- 11 Apr 20242.5 years agoVersion 3.10.2 releasedfrom the release logCommitted by ishitaka.
- 20 Mar 20242.5 years agoVersion 3.10.0 releasedfrom the release logCommitted by ishitaka.
- 12 Mar 20242.5 years agoVersion 3.9.1 releasedfrom the release logCommitted by ishitaka.
- 06 Mar 20242.5 years agoVersion 3.9.0 releasedfrom the release logCommitted by ishitaka.
- 07 Feb 20179.5 years ago70 earlier releasesfrom the release logBetween 07 Feb 2017 and 27 Feb 2024. Listed individually in the public release log rather than here.
- 18 Jan 201610 years agoAdded to the WordPress.org directoryReported by the plugin API as the date this plugin was added.
What we know, and what we don’t
Everything on this page in one place, including the gaps, so that nothing here is mistaken for a clean bill of health.
What we know
- It has been held by ishitaka for all 91 days we have observed it.
- It was last released 4 months ago (19 Jul 2026).
- Its author declares it tested up to WordPress 7.0.8; WordPress is now on 7.1.
- WordPress.org reports 30,000+ active installs.
- It carries 11 ratings, averaging 5.0 out of 5.
What we don’t know yet
- No forum threads were open in the two months we measure, so how responsive its support is cannot be said. One new thread starts answering that.
- No release in the 91 days we have been watching, so how often it ships cannot be said. Every further day of silence tells you more.
Every record on this site, this one included, works under the same limits. We read what WordPress.org publishes about a plugin, never the plugin’s own code, so nothing here says whether a plugin is well built or safe. Install counts reach us already rounded; a change smaller than a band step doesn’t show. We don’t track security advisories yet. For anything older than our first observation we rely on the plugin’s public release log, where one exists. What this registry can and cannot see
Similar plugins
Plugins that share this one’s tags and talk about the same things in their own descriptions. Distinctive tags count for far more than broad ones. Sharing hover means something, sharing woocommerce does not, and a plugin that never mentions the subject matter is left out however its author tagged it. Among close matches, more widely installed plugins are listed first. This is a grouping rather than a ranking of quality.
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention
WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring
1,000,000+ installs4.8★ (1,488)updated 23 Sep 2026
33× the installs
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.
3,000,000+ installs4.9★ (8,869)updated 26 Oct 2026
100× the installs
Hide My WP Ghost – Security & Firewall
Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA
100,000+ installs4.5★ (373)updated 30 Oct 2026
Defyn Security Manager – Hide Login, 2FA & Brute-Force Protection
Hide wp-admin behind a custom login URL and stop brute-force attacks with two-factor authentication, login limits, IP rules and an activity log.
30+ installsupdated 16 Oct 2026
far fewer installs
Anti-Malware Security and Brute-Force Firewall
This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.
100,000+ installs4.9★ (783)updated 27 Oct 2026
Security Optimizer – The All-In-One Protection Plugin
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
1,000,000+ installs4.5★ (157)updated 14 Oct 2026
33× the installs
Grouped from the tags each author chose for their own plugin, so the grouping is only as good as those tags.
Reach out about this record
Corrections, missing context, or anything else about XO Security: a person reads every submission, and corrections get a reply within 5 business days.