Login Delay Shield Security & Risk Analysis

wordpress.org/plugins/wp-login-delay

Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.

80 active installs v2.1.4 PHP 5.4+ WP 3.5.1+ Updated Mar 10, 2026
brute-forcelockoutloginsecurityxmlrpc
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Login Delay Shield Safe to Use in 2026?

Generally Safe

Score 100/100

Login Delay Shield has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 25d ago
Risk Assessment

The wp-login-delay plugin v2.1.5 exhibits a generally good security posture based on the provided static analysis and vulnerability history. The complete absence of known CVEs, unpatched vulnerabilities, and common vulnerability types suggests a history of stable and secure development. Furthermore, the code analysis reveals strong adherence to secure coding practices, with 100% of SQL queries utilizing prepared statements, a respectable number of nonce and capability checks, and no observed external HTTP requests. The limited attack surface, particularly the absence of unprotected entry points, is also a positive indicator.

Key Concerns

  • Output escaping is not consistently applied
Vulnerabilities
None known

Login Delay Shield Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Login Delay Shield Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
6 prepared
Unescaped Output
50
72 escaped
Nonce Checks
3
Capability Checks
5
File Operations
1
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared6 total queries

Output Escaping

59% escaped122 total outputs
Attack Surface

Login Delay Shield Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_wldelay_dismiss_name_change_noticewp-login-delay.php:925
WordPress Hooks 21
actionadmin_menuwldelay-settings.php:60
actionadmin_initwldelay-settings.php:61
actionplugins_loadedwp-login-delay.php:29
actionwp_dashboard_setupwp-login-delay.php:65
actionadmin_enqueue_scriptswp-login-delay.php:83
actionadmin_post_wldelay_unlock_current_ipwp-login-delay.php:319
actionadmin_post_wldelay_export_login_logwp-login-delay.php:593
actionadmin_noticeswp-login-delay.php:619
actionwpwp-login-delay.php:801
actionwldelay_cleanup_logswp-login-delay.php:853
actionplugins_loadedwp-login-delay.php:864
actionadmin_noticeswp-login-delay.php:913
actionplugins_loadedwp-login-delay.php:936
actionupdate_option_wldelay_optionswp-login-delay.php:971
actionadd_option_wldelay_optionswp-login-delay.php:972
actiondelete_option_wldelay_optionswp-login-delay.php:973
actionwp_login_failedwp-login-delay.php:1624
filterauthenticatewp-login-delay.php:1681
filterrest_authentication_errorswp-login-delay.php:1747
filterauthenticatewp-login-delay.php:1811
filterwp_authenticate_userwp-login-delay.php:1976

Scheduled Events 1

wldelay_cleanup_logs
Maintenance & Trust

Login Delay Shield Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 10, 2026
PHP min version5.4
Downloads4K

Community Trust

Rating88/100
Number of ratings5
Active installs80
Developer Profile

Login Delay Shield Developer Profile

michael.damoiseau

1 plugin · 80 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Login Delay Shield

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-login-delay/admin.css
Version Parameters
wp-login-delay/admin.css?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Login Delay Shield