Login with Username or Email Security & Risk Analysis

wordpress.org/plugins/login-with-username-or-email

Allow users to login with Email or Username while logging in to Wordpress.

100 active installs v2.7 PHP + WP 3.0.1+ Updated Mar 14, 2016
emailloginlogin-with-email-addresslogin-with-email-or-usernameusername
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Login with Username or Email Safe to Use in 2026?

Generally Safe

Score 85/100

Login with Username or Email has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The 'login-with-username-or-email' v2.7 plugin exhibits an exceptionally strong security posture based on the provided static analysis and vulnerability history. The absence of any identified dangerous functions, unescaped output, file operations, external HTTP requests, or SQL queries not using prepared statements is a testament to well-implemented secure coding practices. Furthermore, the plugin's attack surface is completely protected with authorization checks, indicating no direct entry points for unauthorized access. The lack of any recorded vulnerabilities, past or present, across all severity levels, and the absence of any taint flows with unsanitized paths are significant strengths. This plugin appears to be developed with security as a high priority, demonstrating a commitment to robust code and a stable history.

Vulnerabilities
None known

Login with Username or Email Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Login with Username or Email Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Login with Username or Email Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
filterauthenticateemail_login.php:14
filtergettextemail_login.php:24
actionadmin_noticesemail_login.php:74
actionadmin_initemail_login.php:76
actionadmin_initemail_login.php:87
actionadmin_noticesemail_login.php:125
filterplugin_action_linksemail_login.php:128
Maintenance & Trust

Login with Username or Email Maintenance & Trust

Maintenance Signals

WordPress version tested4.4.34
Last updatedMar 14, 2016
PHP min version
Downloads6K

Community Trust

Rating52/100
Number of ratings5
Active installs100
Developer Profile

Login with Username or Email Developer Profile

BCS Website Solutions

2 plugins · 160 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Login with Username or Email

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
login-with-username-or-email
FAQ

Frequently Asked Questions about Login with Username or Email