Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

DoLogin Security · Version history

DoLogin Security changelog and version history

Latest version
5.1.3
Oct 13, 2026 (27 days ago)
Releases
64
since 2019
In the last year
5
about one every 25 days
Tested up to
WordPress 7.1.4
PHP 5.6 or later

Releases each year

  • 201924 releases
  • 202018 releases
  • 20212 releases
  • 20225 releases
  • 20234 releases
  • 20241 release
  • 20255 releases
  • 20265 releases

20265 releases

  1. DoLogin Security 5.1.3Latest

    • 🍀 Added local proof-of-work, ordered clicks with PoW, and slider puzzles with PoW alongside Cloudflare Turnstile.
    • 🍀 Unified bot-protection toggles and automatic previews with visible PoW statistics, free image clicks, a large puzzle handle and a refresh icon. Loading and server results overlay the current challenge without adding a status row.
    • 🔐 Bound one-time tickets to their form and exact client, grouped IPv6 quotas by /64, capped each client at five live records, and refused challenges for blocked IPs.
    • 🔐 Removed image metadata shortcuts with GD-generated PNGs and added random colors and pixel texture. Image recognition remains possible; image modes require PHP GD and never silently downgrade.
    • 🐞 Prevented unsafe HTTP configuration, added keyboard Enter submission for sliders and Backspace undo with click-count announcements, and aligned 2FA preflight credentials with final login.
    • 🐞 Limited shared 2fa cleanup to DoLogin-sealed values and preserved uninstall retry on read failure. Unknown unsealed values survive; third-party values sealed by the old 4.7.4 migration cannot be distinguished and are still removed.

  2. DoLogin Security 5.0.10

    • 🍀 Added verified same-device KeyLockr login, simplified MyDeveloper guidance, and reduced login-page assets.
    • 🔐 Hardened KeyLockr SSO, 2FA replay cleanup, and uninstall data removal.
    • 🔐 Made only KeyLockr authorization denials and account-identity mismatches consume login retries, preventing protocol or transport errors from locking out an IP.
    • 🐞 Fixed stale same-device returns, WooCommerce forced-login flashes, token-error pages, and login-log feedback.

  3. DoLogin Security 4.8.3

    • 🐞 Kept valid KeyLockr site-key blobs read-only and limited storage migration to signing-only blobs, preventing avoidable login failures when no key material needs an upgrade.
    • 🔐 Restored a fixed per-site KeyLockr encryption keypair and atomically upgraded signing-only storage so repeated QR logins reuse the same backend-owned encryption identity.
    • 🐞 Stopped passive visits to the WordPress login page from being counted as failed login attempts while Force KeyLockr SSO is enabled.
    • 🍀 Highlighted the post-scan KeyLockr unlock and approval prompt in green so users can see that the next action is on their phone.
    • 🔐 Removed lost-password links across supported WordPress versions and blocked both new and pre-issued password-reset keys across core and third-party reset flows while Force KeyLockr SSO keeps username/password login disabled.

  4. DoLogin Security 4.7.7

    • 🍀 Made the login-page KeyLockr sign-in start on demand with clear DoLogin branding and a KeyLockr reference link, instead of opening a connection on every login-page visit.
    • 🔐 Protected passwordless and site-connection tokens with salt-keyed HMAC verifiers, and encrypted TOTP and Site Easy Login private keys at rest.
    • 🐞 Fixed an upgrade fatal error by waiting until WordPress salt APIs are available before running migrations.
    • 🔐 Added and hardened KeyLockr SSO QR login with reusable site identity, secure account linking and repair, encrypted AppData verification, bounded decoding, rate-limited replay-resistant sessions, validated redirects, and fail-closed forced login that never restores older interactive methods automa…
    • 🔐 Fixed Site Easy Login assertion tampering and replay by signing the user, public key, destination, issuance time, and token ID together, then atomically consuming each assertion.
    • 🔐 Hardened 2FA and token login by failing closed when a forced 2FA secret is missing, enforcing lockouts, binding confirmation nonces, and atomically consuming replay state.
    • 🐞 Fixed IPv4/IPv6 allow/deny matching, settings return behavior, deleted-user handling, and multisite table provisioning.
    • 🔐 Restricted companion-plugin installation and protected GeoIP and Turnstile requests while reducing unnecessary external traffic.
    • 🧹 Removed legacy SMS login, the obsolete mobile-number profile field, and the SMS database table.

  5. DoLogin Security 4.4

    • 🐞 Security: Fixed an authentication bypass via insufficient randomness in passwordless and site-connection login tokens (CVE-2026-14495). Login tokens and SMS codes are now generated with a cryptographically secure random source.
    • 🐞 Security: Fixed an unauthenticated stored XSS in the Login Attempts log, dashboard widget, and Site Connections tables. All output is now escaped.
    • 🐞 Security: The per-IP failure limit is now enforced on the passwordless and easy-login endpoints; token comparison is constant-time.
    • 🐞 Security: Enabled TLS verification on outbound API calls, validated the site-connection URL (SSRF), switched to safe redirects, and added a no-referrer policy on the passwordless confirmation page to prevent token leakage.
    • 🐞 Cloudflare Turnstile no longer blocks XML-RPC authentication, which cannot present a captcha and is already covered by the login attempt limiter.
    • Declared WooCommerce HPOS (High-Performance Order Storage) compatibility.

20255 releases

  1. DoLogin Security 4.3

    • Generating passwordless link will redirect to the corresponding tab now.

  2. DoLogin Security 4.2

    • 🍀 Cloudflare Turnstile reCAPTCHA.
    • 🐞 Fixed 2FA conflict w/ reCAPTCHA.

  3. DoLogin Security 4.1.1

    • Resolved WooCommerce HPOS feature warning.

  4. DoLogin Security 4.1

    • Showed the easy login confirmation landing page.
    • Disallowed reuse of login link to prevent possible replay attack.
    • Fixed root site pk/sk clear issue in easy login when saving conf.
    • Restored reCAPTCHA to previous version.

  5. DoLogin Security 4.0

    • 🍀 Easy Login feature! Allow one root WordPress to easy login to multi child WordPress sites.

20241 release

  1. DoLogin Security 3.8

    • Security patch per patchstack report.

20234 releases

  1. DoLogin Security 3.7.1

    • IP vulnerability patch for dashboard widget. (Bob@Jetpack)

  2. DoLogin Security 3.7

    • IP vulnerability patch. (Bob@Jetpack)

  3. DoLogin Security 3.6

    • Fixed Google reCAPTCHA authentication failure. (mandotr)

  4. DoLogin Security 3.5.2

    • Fixed auto upgrade PHP warning. (lavacano)

20225 releases

  1. DoLogin Security 3.5.1

    • Banner to install qrcode plugin to enable 2FA.

  2. DoLogin Security 3.5

    • 🍀 Two-factor Authentication.

  3. DoLogin Security 3.4

    • Bypassed version check to speed up WP6 loading.

  4. DoLogin Security 3.3

    • Fixed potential duration value in string conversion issue. (wpcrono)

  5. DoLogin Security 3.2

    • API dologin_admin_menu_access to allow other users to config dologin settings. (franfal)

20212 releases

  1. DoLogin Security 3.1

    • Compatibility improvement when communication failed between client wordpress and DoAPI.us API. (@matteocuellar @ecomturbo @thesaintindiano)

  2. DoLogin Security 3.0

    • 🍀 Dashboard widget.
    • New API for free text message gateway.

202018 releases

  1. DoLogin Security 2.9.4

    • Fixed IXR_Error PHP notice for XMLRPC login failure.

  2. DoLogin Security 2.9.3

    • Support translation for login text message. (@merkwert)

  3. DoLogin Security 2.9.2

    • More accurate to detect IP.

  4. DoLogin Security 2.9

  5. DoLogin Security 2.8

  6. DoLogin Security 2.7.1

  7. DoLogin Security 2.7

  8. DoLogin Security 2.6

  9. DoLogin Security 2.5

  10. DoLogin Security 2.4

  11. DoLogin Security 2.3

  12. DoLogin Security 2.2.2

  13. DoLogin Security 2.2.1

  14. DoLogin Security 2.2

  15. DoLogin Security 2.1

  16. DoLogin Security 2.0

  17. DoLogin Security 1.9

  18. DoLogin Security 1.8

201924 releases

  1. DoLogin Security 1.7.1

  2. DoLogin Security 1.7

  3. DoLogin Security 1.6

  4. DoLogin Security 1.5

  5. DoLogin Security 1.4.7

  6. DoLogin Security 1.4.6

  7. DoLogin Security 1.4.5

  8. DoLogin Security 1.4.4

  9. DoLogin Security 1.4.3

  10. DoLogin Security 1.4.2

  11. DoLogin Security 1.4.1

  12. DoLogin Security 1.4

  13. DoLogin Security 1.3.5

  14. DoLogin Security 1.3.4

  15. DoLogin Security 1.3.3

  16. DoLogin Security 1.3.2

  17. DoLogin Security 1.3.1

  18. DoLogin Security 1.3

  19. DoLogin Security 1.2.2

  20. DoLogin Security 1.2.1

  21. DoLogin Security 1.2

  22. DoLogin Security 1.1.1

  23. DoLogin Security 1.1

  24. DoLogin Security 1.0

Questions about DoLogin Security’s releases

What is the latest version of DoLogin Security?

5.1.3, released on Oct 13, 2026 (3 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 5.6 or later.

How often is DoLogin Security updated?

5 releases in the last year, about one every 25 days. Its first release on WordPress.org dates from September 2019.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in DoLogin Security’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.