Is All-In-One Security still maintained?
Yes. The WordPress.org directory shows the last release of All-In-One Security on 17 September 2026, tested up to WordPress 7.1.3. On the evidence the directory publishes, there is nothing here that should worry you.
The evidence
Every figure below is read from the WordPress.org plugin directory. Nothing here is our assessment of the code.
| Last release | 17 September 2026 (one month ago) |
|---|---|
| Current version | 5.4.10 |
| Tested up to | WordPress 7.1.3 (current is 7.1.3) |
| Requires PHP | 5.6 |
| Active installs | At least 1 million sites (the directory reports a rounded floor, not an exact count) |
| Support threads | 13 in the last two months, too few for the share resolved to mean much |
| Directory status | Listed |
| Read from the directory | 21 October 2026 |
What these signals mean
Two things the directory publishes say a plugin is being kept up, and this one shows both: a recent release, and a tested-up-to version close to current WordPress. Neither is about the quality of the code. They are about whether anyone will be there when something changes underneath it.
That is worth checking again in a year rather than treating as settled. Plugins change hands, authors move on, and a plugin that is maintained today is not automatically maintained at the next WordPress release.
What to do about it
Nothing. Keep it updated and check again in a year.
If you are choosing between this and something else, the maintenance signals here are the ones worth weighing: they say more about whether the plugin will still work after the next WordPress release than a feature comparison does.
Is a site you look after running All-In-One Security?
Our free WordPress plugin checker reads any public site and lists the plugins it loads, with the same maintenance signals as the table above for each one. No login and no signup, so it works on a client’s site before you have access to it.
How All-In-One Security compares in its category
The WordPress.org directory files All-In-One Security under the "firewall" tag. We read the first 24 plugins the directory lists there and kept the ones that have shipped a release in the last year and are installed on at least 10,000 sites. Each author picks their own plugin's tags, so sharing one means two plugins are listed side by side, not that they do the same job.
| Plugin | Active installs | Last release |
|---|---|---|
| Wordfence Security | At least 5 million sites | 30 September 2026 |
| All-In-One Security (this plugin) | At least 1 million sites | 17 September 2026 |
| Limit Login Attempts Security | At least 1 million sites | 23 September 2026 |
| Security Optimizer | At least 1 million sites | 14 October 2026 |
One plugin in the table is on more sites than All-In-One Security: Wordfence Security leads with at least 5 million sites, against at least 1 million sites for All-In-One Security. Limit Login Attempts Security and Security Optimizer report the same rounded figure as All-In-One Security. An install count measures how many sites depend on a plugin, not how good it is. What reach does buy is a larger pool of people who notice a breaking change early and report it.
Every other plugin in the table has released since All-In-One Security last did on 17 September 2026, most recently Security Optimizer on 14 October 2026. All of them released within 27 days of each other, so on this signal there is nothing between them.
Nothing here is a reason to move off All-In-One Security. Every plugin in the table passes the same maintenance bar this page applies to it, so the comparison is for choosing between them, and what each one actually does on your site should decide that.
Related plugin checks
- Is WPS Hide Login still maintained? Updated 13 August 2026, current against recent WordPress. Nothing of concern.
- Is Limit Login Attempts still maintained? No release in 3 years and 6 months, according to the WordPress.org directory.
- Is WP fail2ban still maintained? Updated 20 October 2026, current against recent WordPress. Nothing of concern.
- Is Kadence Security still maintained? Updated 14 October 2026, current against recent WordPress. Nothing of concern.
- Is Sucuri Security still maintained? Updated 14 October 2026, current against recent WordPress. Nothing of concern.
Link to this check
Maintain All-In-One Security, or write about it? This badge links to this page, so your readers can see the same evidence. Copy the HTML below.
<a href="https://zignites.com/plugin-check/all-in-one-wp-security-and-firewall"><img src="https://zignites.com/badges/plugin-checker.svg" alt="Maintenance signals for All-In-One Security, checked with Zignites Plugin Checker" width="232" height="20"></a>Questions
When was All-In-One Security last updated?
The WordPress.org directory records its most recent release as 17 September 2026. That date is read from the directory each time this page is built, and the page states when it was read.
How can I tell if a WordPress plugin is still maintained?
Three things, all published by the directory on the plugin's own listing: how long ago the last release was, which WordPress version the author says they tested against, and whether the directory still lists it. None of them is about code quality. Together they say whether anybody will be there when PHP or WordPress changes underneath the plugin, which is what actually decides whether it keeps working.
Is All-In-One Security a security risk?
We do not know, and nothing on this page is a security finding. Vulnerability data for WordPress plugins sits behind paid commercial APIs, and guessing at it from a version number either alarms people about plugins that are fine or implies that everything unflagged has been checked and is safe. Both are worse than saying nothing. What this page reports is maintenance: when the plugin last shipped, which WordPress version its author last tested against, and whether the directory still lists it. Those are facts the directory publishes, and they are what predicts whether a plugin will still work after the next core release.
Read from the WordPress.org plugin directory on 21 October 2026. We report maintenance signals only, and never claim a plugin is insecure. All plugins we cover.