Password Protect – Temporary Login Without Password & Password Protect Entire Site Security & Risk Analysis

wordpress.org/plugins/smart-password-protect

Password Protect entire site & create Temporary Login Without Password links. Simple & secure access for developers or maintenance.

70 active installs v1.2.4 PHP 7.4+ WP 5.6+ Updated Mar 12, 2026

maintenance-modepassword-protectpasswordless-loginrestrict-contenttemporary-login

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Password Protect – Temporary Login Without Password & Password Protect Entire Site Safe to Use in 2026?

Generally Safe

Score 100/100

Password Protect – Temporary Login Without Password & Password Protect Entire Site has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 22d ago

Risk Assessment

The "smart-password-protect" plugin v1.2.4 demonstrates a strong security posture based on the provided static analysis and vulnerability history. The code exhibits excellent security practices, with 100% of SQL queries using prepared statements and 100% of outputs being properly escaped. The presence of a nonce check and five capability checks further enhances its security. Crucially, there are no identified dangerous functions, file operations, or external HTTP requests, and the taint analysis reveals zero critical or high severity flows. The plugin also has no recorded vulnerabilities, including CVEs, indicating a well-maintained and secure codebase. The lack of a significant attack surface with unprotected entry points is also a positive sign. Overall, this plugin appears to be very secure.

Vulnerabilities

None known

Password Protect – Temporary Login Without Password & Password Protect Entire Site Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Password Protect – Temporary Login Without Password & Password Protect Entire Site Code Analysis

Dangerous Functions

Raw SQL Queries

14 prepared

Unescaped Output

39 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared14 total queries

Output Escaping

100% escaped39 total outputs

Attack Surface

Password Protect – Temporary Login Without Password & Password Protect Entire Site Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 38

actionadmin_bar_menuincludes\Admin\AdminBar.php:27

actionadmin_bar_menuincludes\Admin\AdminBar.php:28

actionadmin_bar_menuincludes\Admin\AdminBar.php:29

actionadmin_enqueue_scriptsincludes\Admin\AdminBar.php:30

actionwp_enqueue_scriptsincludes\Admin\AdminBar.php:31

actionwp_logoutincludes\Admin\AdminBar.php:32

actionadmin_initincludes\Admin\Settings.php:26

actionadmin_menuincludes\Admin\Settings.php:27

actionadmin_enqueue_scriptsincludes\Admin\Settings.php:28

actionrest_api_initincludes\Api\BaseController.php:26

actioninitincludes\Auth\LoginHandler.php:27

actionsppwp_daily_cleanupincludes\Core\Cron.php:29

actionsppwp_daily_cleanupincludes\Core\Cron.php:30

actionadmin_initincludes\Core\Plugin.php:62

filterplugin_row_metaincludes\Core\Plugin.php:64

actionupgrader_process_completeincludes\Core\TempLoginLogger.php:27

actionactivated_pluginincludes\Core\TempLoginLogger.php:28

actiondeactivated_pluginincludes\Core\TempLoginLogger.php:29

actiondeleted_pluginincludes\Core\TempLoginLogger.php:30

actionswitch_themeincludes\Core\TempLoginLogger.php:33

actiondelete_themeincludes\Core\TempLoginLogger.php:34

actionwp_insert_postincludes\Core\TempLoginLogger.php:37

actionpost_updatedincludes\Core\TempLoginLogger.php:38

actionwp_trash_postincludes\Core\TempLoginLogger.php:39

actionbefore_delete_postincludes\Core\TempLoginLogger.php:40

actiontemplate_redirectincludes\Frontend\Protection.php:53

actionlogin_initincludes\Frontend\Protection.php:54

filterrest_authentication_errorsincludes\Frontend\Protection.php:55

actionwp_enqueue_scriptsincludes\Frontend\Protection.php:56

actionlogin_enqueue_scriptsincludes\Frontend\Protection.php:57

actioninitincludes\Security\AccessControl.php:28

actionadmin_initincludes\Security\AccessControl.php:31

actionpersonal_options_updateincludes\Security\AccessControl.php:32

actionedit_user_profile_updateincludes\Security\AccessControl.php:33

filtermap_meta_capincludes\Security\AccessControl.php:34

actionadmin_initincludes\Security\AccessControl.php:35

filteruser_has_capincludes\Security\AccessControl.php:38

actionplugins_loadedsmart-password-protect.php:72

Scheduled Events 1

sppwp_daily_cleanup

Maintenance & Trust

Password Protect – Temporary Login Without Password & Password Protect Entire Site Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedMar 12, 2026

PHP min version7.4

Downloads2K

Community Trust

Rating74/100

Number of ratings3

Active installs70

Alternatives

Password Protect – Temporary Login Without Password & Password Protect Entire Site Alternatives

Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content

password-protected

Protect your WordPress site, pages, posts, WooCommerce products, and categories with single or multiple passwords.

300K 5 CVEs

Password for WP

password-for-wp

Add a password for the entire WordPress website. Edit the background and message. Free and simple to use.

200 1 CVE

Temporary Login

temporary-login

Create a secure, temporary URL for easy access to your WP admin.

40K No CVEs

PPWP – Password Protect Pages

password-protect-page

Password protect WordPress pages and posts by user roles or with multiple passwords; protect your entire website with a single password.

30K 4 CVEs

Passster – Password Protect Pages and Content

content-protector

Password Protect Pages, Posts & Content in WordPress

10K 10 CVEs

Developer Profile

Password Protect – Temporary Login Without Password & Password Protect Entire Site Developer Profile

Huzaifa Al Mesbah

10 plugins · 400 total installs

trust score

Avg Security Score

97/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Password Protect – Temporary Login Without Password & Password Protect Entire Site

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/smart-password-protect/assets/css/admin-bar.css/wp-content/plugins/smart-password-protect/assets/js/sppwp-admin.js/wp-content/plugins/smart-password-protect/assets/js/sppwp-frontend.js

Script Paths

/wp-content/plugins/smart-password-protect/assets/js/sppwp-admin.js/wp-content/plugins/smart-password-protect/assets/js/sppwp-frontend.js

Version Parameters

smart-password-protect/assets/css/admin-bar.css?ver=smart-password-protect/assets/js/sppwp-admin.js?ver=smart-password-protect/assets/js/sppwp-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes

sppwp-temp-indicatorsppwp-status-nodesppwp-enabled

Data Attributes

data-sppwp-noncedata-sppwp-redirectdata-sppwp-user-iddata-sppwp-site-id

JS Globals

sppwp_configsppwp_admin_config

REST Endpoints

/wp-json/sppwp/v1/temp-login

Shortcode Output

[sppwp_protection_form][sppwp_password_form]

FAQ