Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

API Bearer Auth

by michielve · 300+ active installs · Checked 4 Nov 2026
Limited data1 Warning

Limited data: API Bearer Auth has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

82/ 100 Canary Score

Based on 3 of 5 areas

Sub-scores for API Bearer Auth
Ownership100
Maintenance50
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is API Bearer Auth still maintained?
Yes. Last release 8 Dec 2025, 0 releases in the last 24 months. 8 Dec 2025 · wordpress.org
Who owns API Bearer Auth, and has it changed hands?
No change recorded. Main committer michielve since Dec 2017. 4 Nov 2026 · SVN log
Was API Bearer Auth removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is API Bearer Auth safe?
1 known vulnerability, fixed (latest in 20190907). Not on the exploited list. 5 Sep 2019 · Wordfence Intelligence
Is the latest API Bearer Auth update safe to install?
Not enough data. No release date on record for the current version. Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

History: 1 past vulnerability, patched.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
michielve1 Dec 2017 to 8 Dec 2025, 35 commits

1 committer recorded. No ownership changes recorded since 2017.

Maintenance

Last release
11 months ago
Releases, 24 months
0
Tested up to
6.9 vs 7.1
Requires PHP
5.4.0 supported 8.2+

Last release 8 Dec 2025. Tested up to 6.9, 2 major versions behind WordPress 7.1. Release history builds as we see new versions.

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Last 90 days vs lifetime average rating for API Bearer Auth
Last 90 daysNo reviews
Lifetime5.0
Rating distribution
5 star6
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability on record, patched (latest fixed in 20190907).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
5 Sep 2019API Bearer Auth < 20190907 - Cross-Site Scripting6.1< 2019090720190907n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

300+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Facts

Version20200916
Authormichielve
Added1 Dec 2017
Last updated8 Dec 2025
Active installs300+
Requires WordPress4.6
Tested up to6.9.11
Requires PHP5.4.0
Categorynot stated
Tagsapi, jwt, rest-api, jwt-tokens, authentication

Other plugins by this author: Private Google Calendars, Simple Fast Highlighter, Quick Questionnaire, Fast TOC

Questions

Is API Bearer Auth still maintained?

Yes. Last release 8 Dec 2025, 0 releases in the last 24 months.

Who owns API Bearer Auth, and has it changed hands?

No change recorded. Main committer michielve since Dec 2017.

Was API Bearer Auth removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is API Bearer Auth safe?

1 known vulnerability, fixed (latest in 20190907). Not on the exploited list.

Is the latest API Bearer Auth update safe to install?

Not enough data. No release date on record for the current version.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue