Skip to content
PluginCanary

Access Governance for WordPress (aka

Access Governance for WordPress (aka AAM)
by AAM Plugin · 100,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 19 Oct 2026, 37 releases in 24 months, no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for Access Governance for WordPress (aka
Ownership100
Maintenance100
Security95
Support70
Reputation70

How the score works

Quick answers

Is Access Governance for WordPress (aka still maintained?
Yes. Last release 19 Oct 2026, 37 releases in the last 24 months. 19 Oct 2026 · wordpress.org
Who owns Access Governance for WordPress (aka, and has it changed hands?
No change recorded. Main committer vasyltech since Dec 2018. 4 Nov 2026 · SVN log
Was Access Governance for WordPress (aka removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Access Governance for WordPress (aka safe?
12 known vulnerabilities, all fixed (latest in 7.1.1). Not on the exploited list. 14 May 2026 · Wordfence Intelligence
Is the latest Access Governance for WordPress (aka update safe to install?
No ownership change before 8.0.2. No one-star spike after it. 19 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
vasyl_m30 Jul 2011 to 27 Nov 2018, 530 commits
vasyltech2 Dec 2018 to 19 Oct 2026, 246 commits

2 committers recorded. No ownership change since 2011.

Maintenance

Last release
16 days ago
Releases, 24 months
37
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for Access Governance for WordPress (aka
Q1 20244
Q2 20249
Q3 20246
Q4 20246
Q1 20259
Q2 202510
Q3 20253
Q4 20251
Q1 20264
Q2 20262
Q3 20262
Q4 20263

Last release 19 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Average rating per quarter for Access Governance for WordPress (aka
Q1 20245.0
Q2 20242.0
Q3 20245.0
Q1 20255.0
Q3 20255.0

Average rating stayed at 5.0 between Q1 2024 and Q3 2025.

Rating distribution
5 star310
4 star22
3 star14
2 star8
1 star66
Latest low reviews

Security record

1 vulnerability in 24 months (12 on record), patched (latest fixed in 7.1.1).

Show 12 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
14 May 2026Advanced Access Manager - Access Governance for WordPress <= 7.1.0 - Missing Authorization5.3<= 7.1.07.1.1Patched before disclosure
20 Mar 2024Advanced Access Manager <= 6.9.20 - Reflected Cross-Site Scripting6.1<= 6.9.206.9.21Patched before disclosure
16 Mar 2024Advanced Access Manager <= 6.9.20 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5<= 6.9.206.9.21Patched before disclosure
27 Dec 2023Advanced Access Manager <= 6.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 6.9.186.9.19Patched before disclosure
27 Dec 2023Advanced Access Manager <= 6.9.18 - Authenticated (Author+) Open Redirect4.3<= 6.9.186.9.19Patched before disclosure
26 Dec 2023Advanced Access Manager <= 6.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.9.156.9.16Patched before disclosure
19 Oct 2021Advanced Access Manager <= 6.7.9 - Admin+ Stored Cross-Site Scripting4.8< 6.8.06.8.0Patched before disclosure
20 Aug 2020Advanced Access Manager <= 6.6.1 - Authenticated Information Disclosure4.3<= 6.6.16.6.2Patched before disclosure
14 Aug 2020Advanced Access Manager <= 6.6.1 - Authenticated Authorization Bypass and Privilege Escalation7.5<= 6.6.16.6.22
9 Sep 2019Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read9.8< 5.9.95.9.9Patched before disclosure
21 Jun 2016Advanced Access Manager <= 3.2.1 - Unrestricted AJAX Actions allowing Privilege Escalation8.8< 3.2.23.2.21028
20 Aug 2014Advanced Access Manager <= 2.8.2 - Arbitrary File Overwrite7.2< 2.8.32.8.3917

Changelog mentions of security fixes: 8.0.0 (security); 8.0.2 (authorization).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 4 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Access Governance for WordPress (aka
4 May 20263,375
11 May 20266,944
18 May 20269,100
25 May 202636,224
1 Jun 20269,038
8 Jun 20266,365
15 Jun 20264,851
22 Jun 20264,242
29 Jun 20264,261
6 Jul 20266,578
13 Jul 20263,528
20 Jul 20264,155
27 Jul 20263,339
3 Aug 20263,666
10 Aug 20263,071
17 Aug 20262,911
24 Aug 20262,664
31 Aug 20262,810
7 Sep 202644,155
14 Sep 202611,528
21 Sep 20267,979
28 Sep 20265,460
5 Oct 202650,316
12 Oct 202614,036
19 Oct 202634,262
26 Oct 202610,533
2 Nov 20261,293

Weekly downloads over the last 4 weeks are 37% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

MembersScore 93 · 300,000+Controlled Admin AccessScore 93 · 10,000+

Facts

Version8.0.2
AuthorAAM Plugin
Added30 Jul 2011
Last updated19 Oct 2026
Active installs100,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP8.0
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagssecurity, user roles, api security, access governance, restricted content

Other plugins by this author: AAM Protected Media Files, AAM Extension for MainWP, ConfigPress, Noti - Activity Notification

Questions

Is Access Governance for WordPress (aka still maintained?

Yes. Last release 19 Oct 2026, 37 releases in the last 24 months.

Who owns Access Governance for WordPress (aka, and has it changed hands?

No change recorded. Main committer vasyltech since Dec 2018.

Was Access Governance for WordPress (aka removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Access Governance for WordPress (aka safe?

12 known vulnerabilities, all fixed (latest in 7.1.1). Not on the exploited list.

Is the latest Access Governance for WordPress (aka update safe to install?

No ownership change before 8.0.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue