Census › Plugin profiles › Wordfence Security

Wordfence Security – Firewall, Malware Scan, and Login Security

Figures from the Plugin Directory Census · as of 28 Aug 2026

Active installs, lower bound

Group: 1,000,000+ installs

Days since the last release

Group median: 8

4.7

out of 5, from 4,983 ratings

Group median: 4.7 (10+ ratings)

74.4%

Support threads marked resolved, two months

Group: 71.9%

Full profile on wordpress.org Show on the map Compare with your own plugins

What is Wordfence Security and who is behind it?

Wordfence Security is a WordPress plugin in the “Security” field, made by Mark Maunder. It has been listed in the directory since 21 Apr 2012, so for 14 years. It is the only plugin by Mark Maunder with at least 10,000 installs. With 5,000,000 to 5,999,999 active installs it belongs to the 1,000,000+ installs group; its last release came 18 days before the reference date, and it is tested up to WordPress 7.1.

This is how the author describes the plugin on wordpress.org:

“Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.”

Self-description on wordpress.org, retrieved on 10 Sept 2026

When was Wordfence Security last released?

The last release of Wordfence Security came 18 days before the reference date; the group median is 8 days.

Each dot is a plugin in the 1,000,000+ installs group, placed horizontally by days since its last release, on a logarithmic scale. The dashed line marks 365 days.

How many installs does Wordfence Security have?

Wordfence Security had 5,000,000 to 5,999,999 active installs on the reference date. Within its group, 6 plugins had a higher band and 4 plugins the same band.

The API reports installs only as a lower bound with one significant figure: 5,000,000 means at least 5,000,000 and at most 5,999,999.

Which WordPress version is Wordfence Security tested with?

No directory notice: tested up to WordPress 7.1, while core stood at 7.1 on the reference date. The notice appears once the field falls below 6.9; that applied to 3.0% of the group.

How does Wordfence Security compare with its group?

The group holds 67 listed plugins. 74.6% of them had a more recent last release than Wordfence Security; 1.5% had no release for more than 365 days.

Figure	Wordfence Security	Group, 67 plugins
Days since the last release	18	median 8
Rating	4.7 (4,983)	median 4.7 (10+ ratings)
Support threads marked resolved	74.4%	71.9%
Tested up to	7.1	65.7% on 7.1
Requires PHP	7.0	most often 7.4 (49.3%)

All values on the reference date

Slug	`wordfence`
Author	Mark Maunder
Active installs	5,000,000 to 5,999,999
Last release	18 days before the reference date
Tested up to	WordPress 7.1 · core on the reference date: 7.1
Requires WordPress	4.7
Requires PHP	7.0
Rating	4.7 out of 5 from 4,983 ratings
Support threads, two months	119 of 160 marked resolved
Listed since	21 Apr 2012
Total downloads	423,324,808, updates included
Tags	2fa, firewall, malware, scanner, security

Tag	Plugins with 10,000+ installs and this tag	Rank by installs	Median days since release
2fa	12	1	16
firewall	17	1	12
malware	12	1	17
scanner	4	1	39
security	79	1	16

Class of 2012

Wordfence Security has been listed since 21 Apr 2012. Of the 139 plugins with 10,000+ installs added in 2012, 78.4% released within the 365 days before the reference date.

Same group, shared tags

Not a recommendation; the same figures for comparison. Alphabetical.

Plugin	Active installs	Last release	Rating
All-In-One Security	1,000,000 to 1,999,999	15 days before the reference date	4.7 (1,715)
Hostinger Tools	3,000,000 to 3,999,999	3 days before the reference date	3.5 (40)
Jetpack	3,000,000 to 3,999,999	8 days before the reference date	3.7 (2,406)
Limit Login Attempts Security	1,000,000 to 1,999,999	16 days before the reference date	4.8 (1,477)
Loginizer	1,000,000 to 1,999,999	9 days before the reference date	4.8 (1,030)
ManageWP Worker	1,000,000 to 1,999,999	7 days before the reference date	4.6 (678)
Really Simple Security	3,000,000 to 3,999,999	4 days before the reference date	4.9 (8,862)
Safe SVG	1,000,000 to 1,999,999	8 days before the reference date	4.9 (79)

Do you maintain Wordfence Security?

If you maintain Wordfence Security, you can link to this profile, for example from your readme or your website. Both snippets show this badge:

HTML

<a href="https://hafenstudios.com/en/census/plugins/wordfence/"><img src="https://hafenstudios.com/census/plugins/badge-en.svg" alt="Wordfence Security in the Plugin Directory Census 01/2026" width="220" height="40"></a>

Markdown

[![Wordfence Security in the Plugin Directory Census 01/2026](https://hafenstudios.com/census/plugins/badge-en.svg)](https://hafenstudios.com/en/census/plugins/wordfence/)

The image is loaded from hafenstudios.com; as with every request, our server records the usual access data, which is deleted after 14 days. If you prefer not to, use a plain text link.

A value is wrong? Write to moin@hafenstudios.com; a documented correction leads to a new version.

How to cite

hafenstudios (2026): Wordfence Security – Firewall, Malware Scan, and Login Security, profile in the Plugin Directory Census 01/2026, reference date 28 Aug 2026. https://hafenstudios.com/en/census/plugins/wordfence/

Source and status

All values come from the full pull of the public wordpress.org API on 28 Aug 2026 (reference time 21:56:30 UTC). The analysis and text on this page are available under CC BY 4.0; the raw values come from the public wordpress.org API and are in the raw data. How the count was made is set out in the method, what the fields do not say under limits. hafenstudios builds WordPress plugins itself, see the conflict of interest. Corrections to moin@hafenstudios.com; a documented correction leads to a new version. From issue 02 this page will also show the change since the previous reference date. Collected and prepared by Horst Wenzel.

Plugin names and trademarks belong to their owners. hafenstudios is not affiliated with the authors named here.