Skip to content
PluginCanary

authLdap

by heiglandreas · 4,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 12 Jul 2026, 11 releases in 24 months, no unpatched vulnerabilities.

96/ 100 Canary Score
Sub-scores for authLdap
Ownership100
Maintenance90
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is authLdap still maintained?
Yes. Last release 12 Jul 2026, 11 releases in the last 24 months. 12 Jul 2026 · wordpress.org
Who owns authLdap, and has it changed hands?
No change recorded. Main committer heiglandreas since Aug 2010. 3 Nov 2026 · SVN log
Was authLdap removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is authLdap safe?
2 known vulnerabilities, all fixed (latest in 2.6.2). Not on the exploited list. 1 Sep 2023 · Wordfence Intelligence
Is the latest authLdap update safe to install?
No ownership change before 3.1.4. No one-star spike after it. 12 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
heiglandreas27 Aug 2010 to 13 Aug 2026, 137 commits

1 committer recorded. No ownership change since 2010.

Maintenance

Last release
4 months ago
Releases, 24 months
11
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for authLdap
Q1 20242
Q2 20241
Q3 20241
Q4 20241
Q1 20257
Q2 20252
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20262
Q4 20260

Last release 12 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star19
4 star0
3 star0
2 star0
1 star0

Security record

2 vulnerabilities on record, all patched (latest fixed in 2.6.2).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
1 Sep 2023authLdap <= 2.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting3.3<= 2.6.12.6.2260
1 Sep 2023authLdap <= 2.5.8 - Cross-Site Request Forgery4.3<= 2.5.82.5.96

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

4,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for authLdap
4 May 202645
11 May 2026130
18 May 2026127
25 May 2026146
1 Jun 2026126
8 Jun 2026125
15 Jun 2026156
22 Jun 2026123
29 Jun 2026164
6 Jul 2026173
13 Jul 20263,466
20 Jul 2026943
27 Jul 2026435
3 Aug 2026455
10 Aug 2026290
17 Aug 2026298
24 Aug 2026271
31 Aug 2026264
7 Sep 2026268
14 Sep 2026286
21 Sep 2026316
28 Sep 2026330
5 Oct 2026302
12 Oct 2026269
19 Oct 2026393
26 Oct 2026382
2 Nov 202649

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Two Factor AuthenticationScore 100 · 20,000+Login rebuilderScore 100 · 20,000+LWS Hide LoginScore 100 · 20,000+WP Limit Login AttemptsScore 100 · 10,000+Login Security CaptchaScore 100 · 10,000+

Facts

Version3.1.4
Authorheiglandreas
Added27 Aug 2010
Last updated12 Jul 2026
Active installs4,000+
Requires WordPress2.5.0
Tested up to7.0.8
Requires PHP7.4
CategoryUser Management & Authentication > User Registration & Login
Tagsauth, ldap, OpenLDAP, authentication, active directory

Other plugins by this author: binaryImagemagick, DefAI, Talk to Composer

Questions

Is authLdap still maintained?

Yes. Last release 12 Jul 2026, 11 releases in the last 24 months.

Who owns authLdap, and has it changed hands?

No change recorded. Main committer heiglandreas since Aug 2010.

Was authLdap removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is authLdap safe?

2 known vulnerabilities, all fixed (latest in 2.6.2). Not on the exploited list.

Is the latest authLdap update safe to install?

No ownership change before 3.1.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue