WP-Safety

Khushal Login Path Guard Security & Risk Analysis

wordpress.org/plugins/khushal-login-path-guard

Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

0 active installs v2.4.1 PHP 7.0+ WP 5.0+ Updated May 28, 2026
brute-forceloginsecurityuser-enumerationxmlrpc
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Khushal Login Path Guard Safe to Use in 2026?

Generally Safe

Score 100/100

Khushal Login Path Guard has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The khushal-login-path-guard plugin v2.4.1 exhibits a generally strong security posture based on the provided static analysis. The absence of any detected attack surface entry points that are not protected by authentication or capability checks is a significant strength. Furthermore, all detected output operations are properly escaped, and there are no identified file operations or external HTTP requests, which helps mitigate common attack vectors. The lack of any recorded vulnerabilities in its history further contributes to a positive assessment of its security.

Key Concerns

  • SQL query not using prepared statements
Vulnerabilities
None known

Khushal Login Path Guard Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Khushal Login Path Guard Release Timeline

v2.4.1Current
Code Analysis
Analyzed Mar 17, 2026

Khushal Login Path Guard Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
0 prepared
Unescaped Output
0
23 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared1 total queries

Output Escaping

100% escaped23 total outputs
Attack Surface

Khushal Login Path Guard Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 26
actionadmin_menukhushal-login-path-guard.php:32
actionadmin_initkhushal-login-path-guard.php:33
actionplugins_loadedkhushal-login-path-guard.php:36
filtersite_urlkhushal-login-path-guard.php:37
filterwp_redirectkhushal-login-path-guard.php:38
filternetwork_site_urlkhushal-login-path-guard.php:39
filterlogin_urlkhushal-login-path-guard.php:42
filterlogout_redirectkhushal-login-path-guard.php:45
filterlogout_urlkhushal-login-path-guard.php:46
actioninitkhushal-login-path-guard.php:50
actiontemplate_redirectkhushal-login-path-guard.php:51
filterauth_redirectkhushal-login-path-guard.php:52
actionadmin_enqueue_scriptskhushal-login-path-guard.php:55
actioninitkhushal-login-path-guard.php:58
actioninitkhushal-login-path-guard.php:59
filterrest_authentication_errorskhushal-login-path-guard.php:60
filteroembed_response_datakhushal-login-path-guard.php:61
actioninitkhushal-login-path-guard.php:62
filterredirect_canonicalkhushal-login-path-guard.php:63
actionsend_headerskhushal-login-path-guard.php:64
filterthe_generatorkhushal-login-path-guard.php:68
actioninitkhushal-login-path-guard.php:71
filterxmlrpc_enabledkhushal-login-path-guard.php:79
filterwp_headerskhushal-login-path-guard.php:80
actioninitkhushal-login-path-guard.php:128
actionwpkhushal-login-path-guard.php:131
Maintenance & Trust

Khushal Login Path Guard Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedMay 28, 2026
PHP min version7.0
Downloads288

Community Trust

Rating100/100
Number of ratings1
Active installs0
Alternatives

Khushal Login Path Guard Alternatives

Login Delay Shield

Login Delay Shield

wp-login-delay

A
100

Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.

60 No CVEs
WebDoktoru Security

WebDoktoru Security

webdoktoru-security

A
100

Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.

10 No CVEs
Authyo Passwordless Login

Authyo Passwordless Login

authyo-passwordless-login

A
100

WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.

0 No CVEs
Holographic Login Shield

Holographic Login Shield

holographic-login-shield

A
100

Lightweight login protection, brute-force defence and safer admin access controls for WordPress.

0 No CVEs
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention

Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention

limit-login-attempts-reloaded

A
98

WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring

1.0M 4 CVEs
Developer Profile

Khushal Login Path Guard Developer Profile

Khushal Tank

3 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Khushal Login Path Guard

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/khushal-login-path-guard/assets/css/admin-style.css/wp-content/plugins/khushal-login-path-guard/assets/js/admin-script.js
Script Paths
/wp-content/plugins/khushal-login-path-guard/assets/js/admin-script.js
Version Parameters
khushal-login-path-guard/assets/css/admin-style.css?ver=khushal-login-path-guard/assets/js/admin-script.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- Khushal Login Path Guard Settings --><!-- End Khushal Login Path Guard Settings -->
JS Globals
clp_admin_script_vars
FAQ

Frequently Asked Questions about Khushal Login Path Guard