WPIntell

Market

mfa

Mfa matters only if the evidence supports a paid workflow around keeping sites trusted, protected, and recoverable, not a list of isolated fixes. The current commercial thesis is: Security, spam, and trust failures create business risk that owners struggle to triage. The entry wedge is to turn security and abuse signals into prioritized actions, audit trails, and recovery-ready reporting.

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

60 / 82 rows with source links

73.2% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

22 rows with no attached evidence

0 rows have source counts but still need direct links.

Opportunity Summary

Full report

Build a trust and abuse-prevention operations plugin for site owners, agencies, and maintenance teams: Security, spam, and trust failures create business risk that owners struggle to triage. The first wedge is to turn security and abuse signals into prioritized actions, audit trails, and recovery-ready reporting.

The unmet need is not the individual complaint. It is the recurring business workflow: Security, spam, and trust failures create business risk that owners struggle to triage. Current stage: commercial plugin opportunity.

Competitors

3 shown
Two Factor 100.0K installs · 4.8
praise owner
-100.0%momentum 46.0weakness 6/34pain/praise

Pain still appears around security, missing feature despite praise for reliable, quality.

source 1 source 2

Evidence

Open evidence explorer
complaint Potential vulnerability (they are working on it)

Potential vulnerability (they are working on it): users show security, bugs, performance pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · Potential vulnerability (they are working on it) I discussed with the team that there is a hack allowing tokens to be sent without going through the login screen. complaint On a multisite I only seem to get one site going per user

On a multisite I only seem to get one site going per user: users show security, bugs, compatibility pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · – When I try to login on a subsite, however, I get an Error 502 “bad gateway” from Cloudflare. complaint Sorry, but don't install this

Sorry, but don't install this: users show security, missing feature, pricing pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Sorry, but don't install this Another example of some WordPress developers’ totally unethical business practices. mixed Awesome, yet disappointing at the same time.

Awesome, yet disappointing at the same time.: users show security, missing feature, pricing pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Awesome, yet disappointing at the same time. complaint Rublon & WooCommerce: Cart empties when user logs in at checkout

Rublon & WooCommerce: Cart empties when user logs in at checkout: users show bugs, compatibility, missing feature pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Rublon & WooCommerce: Cart empties when user logs in at checkout I realize from another support thread that WooCommerce compatibility is a work in progress, and I really like this plugin on one of my other (non-WooCommerce) WordPress sites. complaint it doesn’t work on my website

it doesn’t work on my website: users show security, missing feature, support pain that may indicate a product gap.

Two Factor · I install and activate the plugin, then go to my profile and see the options. complaint Some spammy crap right here

Some spammy crap right here: users show security, missing feature, pricing pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Some spammy crap right here Can’t even get a price, Just want me to install it and then give them my e-mail to their sales staff. mixed Contacted on Feedback form

Contacted on Feedback form: users show security, bugs, compatibility pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · Contacted on Feedback form Hi, I’ve uninstalled your plugin, and a form popped up. mixed WordPress Backend crashes (Error 500) after Update from 6.06 to 6.07

WordPress Backend crashes (Error 500) after Update from 6.06 to 6.07: users show bugs, compatibility, performance pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · WordPress Backend crashes (Error 500) after Update from 6.06 to 6.07 Hi there, i’ve updated today the miniorange-Plugin, where i use the 2FA. mixed Developer broke the plugin by removing all features to force upgrade

Developer broke the plugin by removing all features to force upgrade: users show bugs, missing feature, pricing pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Developer broke the plugin by removing all features to force upgrade I’m reporting this plugin as broken. mixed 2FA does not appear

2FA does not appear: users show security, compatibility, missing feature pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · 2FA does not appear Hi, I install your plugin and with the setup wizard, enable the 2FA for all users. mixed You plugin broke my elementor editing session

You plugin broke my elementor editing session: users show bugs, compatibility, support pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · You plugin broke my elementor editing session You broke my elementor editing session, for some reason after your plugin update I can’t edit on elementor pro. complaint Pretty silly

Pretty silly: users show bugs, pricing, support pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Pretty silly The plugin authors try to minimize the fact that this plugin ONLY SUPPORTS ONE PERSON . complaint Is this plugin dead?

Is this plugin dead?: users show security, missing feature, migration pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · I see that this plugin has not been updated for a while now, and I was wondering if it will get any future updates and be maintained with new features, and most importantly new security updates. complaint Misleading plugin

Misleading plugin: users show security, missing feature, pricing pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Misleading plugin This plugin is only free if you have a single WordPress user on the intended site; a website that uses the Rublon plugin with more than one user will have no protection unless they “upgrade”. complaint OTP Verification on your Registration Form need premium account

OTP Verification on your Registration Form need premium account: users show compatibility, pricing, support pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · OTP Verification on your Registration Form need premium account OTP Verification on your Registration Form need premium account OTP Verification on your Registration Form need premium account Hello @paknejad , In the free version of Two Factor authentication ( 2FA ) plugin, we support the OTP verification only on Login Forms. complaint Users can undermine, only suitable for admin

The reviewer says users can disable their own 2FA, and support confirms role-based enforcement is a known missing feature.

Two Factor · There is no built-in way for a site administrator to require that users in certain roles have 2FA configured complaint Is this plugin stops brute force attacks?

Is this plugin stops brute force attacks?: users show security, support pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Once inside, botnets infect your visitors with malware. mixed WordPress for Android XML-RPC bug

WordPress for Android XML-RPC bug: users show security, bugs, missing feature pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · WordPress for Android XML-RPC bug This is one of the best (and the simpliest) security plugin for WordPress, congratulation! mixed Restrict to use Rublon for 2 factor user.

Restrict to use Rublon for 2 factor user.: users show security, missing feature, support pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Thank you, Rublon Support Hi I would like to prohibit other user turning off Rublon. mixed Plugin causing critical WordPress error on site access after plugin update

Plugin causing critical WordPress error on site access after plugin update: users show bugs, compatibility, support pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · Plugin causing critical WordPress error on site access after plugin update WordPress version 6.4.2 I have been using your plugin successfully for a couple of years. complaint Two-factor 0.14.2 works, 0.15.0 doesn’t

After upgrading Two Factor, multiple users report invalid authenticator codes or repeated logouts that make admin access unusable, with fixes still not resolving all cases.

Two Factor · users were then not able to login using their previously-created 2FA. complaint Locked out, fed up with this!

Locked out, fed up with this!: users show security, bugs pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · I’ve tried many times … I’ve waited … tried again and again … it gives me this message: ERROR: Access from your IP address has been blocked for security reasons. complaint Wish we could give 0 stars!

Wish we could give 0 stars!: users show security, support pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · I love how they’ve redone their site to make this look so good, but they managed to lie and claim 5 stars while it dwindles down to 4.5 and on the way to the basement. complaint Plugin updates cause critical error when editing Elementor Pages

Plugin updates cause critical error when editing Elementor Pages: users show bugs, compatibility pain that may indicate a product gap.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · Plugin updates cause critical error when editing Elementor Pages Whenever the plugin gets an update it throws a “critical error” white screen of death when editing an Elementor page. complaint miniOrange 2FA 6.1.2: Admin XSS/MITM risk via IP Lookup over HTTP unescaped HTML

The plugin's IP lookup used plain HTTP and injected unescaped HTML into admin pages, creating privacy and potential admin XSS risk before a patch was released.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · potential XSS risk because a network attacker can tamper with the response complaint when i enter the authentication code i get returned to the login page

After entering a two-factor authentication code, the user is returned to the login page and recommends avoiding the add-on.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · after entering the authentication code i get back to the login page complaint [hide this message for a month] button not working

[hide this message for a month] button not working: users show bugs pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · The plugin for what it says but the [hide this message for a month] button is broken. complaint Rublon hacked

Rublon hacked: users show security pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Rublon hacked My IP has suspended my account because the Rublon plugin was hacked. mixed User can turn it off

Users want an option to force two-factor authentication so regular users cannot disable it from their profiles.

Two Factor · Can we force a user to allways use two factor? complaint TOTP codes from Apple Passwords are wiped on the login screen

Two Factor clears autofilled one-time codes from Apple Passwords and other autofill providers, causing the login form to submit empty.

Two Factor · the code disappears immediately, and the form submits empty mixed readme.txt has incorrect plugin version

readme.txt has incorrect plugin version: users show security pain that may indicate a product gap.

Two Factor · However the readme.txt shows Stable tag: 0.11.0 This causes our PY plugins updater to download the plugin every 12 hours. complaint Login issue

Some paid-version miniOrange 2FA users could not log in until the plugin was disabled, and forum support redirected them elsewhere.

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) · Some users cannot login even they click skip button or click on the authentication link from their email. praise Very effective plug-in and fast support!

Very effective plug-in and fast support!: users show security, support pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Very effective plug-in and fast support! praise Easy, secure, effective

Easy, secure, effective: users show security, support pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Easy, secure, effective Easy to set up, works without problem and together with other meaures helped getting rid of brute force attack login attempts. praise I Feel Completely Safe Now

I Feel Completely Safe Now: users show security, setup pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · I Feel Completely Safe Now I’ve been under a constant attack on one of my sites, I have no idea why the person is targeting my site but anyway I have WordFence and Sucuri installed. praise Secured!

Secured!: users show security, setup pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · I have Rublon installed on all my sites. neutral Can’t login to site after update to WordPress 6.8 – Cecil

Can’t login to site after update to WordPress 6.8 – Cecil: users show security, compatibility, setup pain that may indicate a product gap.

Two Factor · Theme: Pen Installed plugins: Akismet Anti-spam: Spam Protection Ver. praise Excellent Implementation and Beautiful Too

Excellent Implementation and Beautiful Too: users show security pain that may indicate a product gap.

Rublon Multi-Factor Authentication (MFA) · Excellent Implementation and Beautiful Too This could FINALLY be it, folks. praise Essential for security

Essential for security: users show security pain that may indicate a product gap.

Two Factor · Essential for security I use it for the security of my WordPress admin panel and it’s really nice.