Description
The Limit Login Attempts addon blocks successive failed login attempts on LoginPress, recording the attacker’s IP and locking access after a configurable number of failures. It works as an extra layer of protection against brute force attacks, adding to the LoginPress dashboard controls for block duration, list of banned IPs, and email notifications whenever a limit is reached.
Key Features
- Automatic IP blocking
Locks the address after a configurable number of failed login attempts. - Customizable limits
Sets how many failures are tolerated before the block and how long it lasts. - Attempt logging
Keeps a log of failed attempts with IP, date, and attempted username. - Banned IP list
Lets you review, release, or block addresses manually from the LoginPress dashboard. - Email notifications
Alerts the administrator when an IP or user exceeds the established limit.
Benefits of Limit Login Attempts
- Brute force defense
Drastically reduces the chance of intrusion through exhaustive password guessing. - Less server load
Cuts off repeated malicious requests that overload the authentication process. - Attack visibility
Identifies attempt patterns and recurring origins for more informed preventive actions. - Granular admin control
Adjusts the blocking policy according to the site’s profile and the audience logging in.
Who Is It For?
- WordPress site administrators concerned about login screen security.
- Stores, member areas, and portals with multiple registered users.
- Agencies that deliver sites hardened against automated bot attacks.
As a complementary layer to LoginPress, Limit Login Attempts closes a critical intrusion vector by enforcing strict limits on how many times the same IP can try to authenticate before being blocked. The combination of detailed logs, configurable banning, and email alerts turns the login screen into a monitored and resilient point, especially useful on sites exposed to bots and automated credential stuffing attempts.
Frequently asked questions
Is LoginPress Limit Login Attempts GPL-licensed?
Yes. LoginPress Limit Login Attempts is distributed under the GPL (GNU General Public License). You may legally use, modify and redistribute it on as many sites as you want.
Can I use LoginPress Limit Login Attempts on multiple sites?
Yes. You can use LoginPress Limit Login Attempts on multiple sites. The number of sites connected to Ultrapack Auto Updater is limited by your plan.
How much does LoginPress Limit Login Attempts cost at Ultrapack?
LoginPress Limit Login Attempts costs US$2.99 as a single purchase, and it is also included in the subscription plans starting at US$12/mo (VIP I).
Does LoginPress Limit Login Attempts include updates?
Yes. The current version of LoginPress Limit Login Attempts is 4.0, published at Ultrapack on Apr 24, 2024. Subscribers update straight from the WordPress dashboard with UAU (Ultrapack Auto Updater).
Is LoginPress Limit Login Attempts scanned before publication?
Yes. Every version of LoginPress Limit Login Attempts goes through a malware scan (ClamAV and YARA rules, at UltraHub) before it is published.
What changed in this version
Version 4.0 2024-04-23
- Enhancement: Limit Login Attempts Add-On is now integrated within LoginPress Pro, no separate installation is required.
- Depreciated: Please upgrade to LoginPress Pro 3.0 to access the updated Limit Login Attempts Add-On. Find out more [here]
Version 3.1.1 2023-06-05
- BugFix: PHP 8.0 Compatibility with LoginPress - Login Widget Add-On.
- Compatibility: Compatible with WordPress 6.2
Version 3.1.0 2023-13-04
- Enhancement: Code refactoring.
- Enhancement: Security fix.
- Compatibility: Compatible with WordPress 6.2
- Compatibility: Compatible with PHP 8.1.
Version 3.0.0 2020-11-09
- BugFix: Warnings from console.
- BugFix: Update error/success message strings.
- New Feature: Introduce Bulk Action for Attempts.
- Enhancement: Optimize UI/UX for WP-Admin Settings.
- Enhancement: Optimize plugin speed and code improvement.
- Compatibility: LoginPress - Limit Login Attempts is compatible with WooCommerce Login Account.
- Compatibility: LoginPress - Limit Login Attempts is compatible with LoginPress - Hide Login Add-On.
- Compatibility: LoginPress - Limit Login Attempts is compatible with TranslatePress plugin.
Version 2.0.0 2020-06-24
- BugFix: Time Stamp Correction according to WordPress Time Zone.
- New Feature: Manually IP add in White and Black List.
- New Feature: XML Request Control.
- Enhancement: New Translation files generated.
Release notes published by the developer.
How to install
Automatic updates: this item is updated by the Ultrapack Auto Updater. With it installed, the new version shows up in your dashboard like any other WordPress update (how to set it up).
- Download the file
loginpress-limit-login-attempts.zip. - In the WordPress dashboard, go to Plugins > Add New > Upload Plugin.
- Select the file
loginpress-limit-login-attempts.zipand click Install Now. - Click Activate.
Stuck on a step? Open a ticket telling us which one you stopped at.

UAU Ready