Authorizer
Healthy: vulnerability published 1 Oct 2026, fixed in 3.16.0.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| figureone | 1 Apr 2015 to 21 Sep 2026, 293 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 43 days ago
- Releases, 24 months
- 18
- Tested up to
- 7.1 current
- Requires PHP
- 8.1 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 4 |
| Q3 2024 | 6 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 7 |
| Q1 2026 | 0 |
| Q2 2026 | 5 |
| Q3 2026 | 5 |
| Q4 2026 | 0 |
Last release 21 Sep 2026. Tested with WordPress 7.1 (current).
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 1 Oct 2026 | Authorizer <= 3.15.3 - Unauthenticated Privilege Escalation | 7.3 | <= 3.15.3 | 3.16.0 | 0 |
| 1 Sep 2026 | Authorizer <= 3.15.1 - Unauthenticated Privilege Escalation | 9.8 | <= 3.15.1 | 3.15.2 | 0 |
| 1 Nov 2022 | phpCAS authentication library < 1.6.0 - Service Hostname Discovery Exploitation | 8 | < 1.6.0 | 1.6.0 | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 20 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 20 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
6,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,665 |
|---|---|
| 11 May 2026 | 572 |
| 18 May 2026 | 3,759 |
| 25 May 2026 | 2,103 |
| 1 Jun 2026 | 832 |
| 8 Jun 2026 | 588 |
| 15 Jun 2026 | 317 |
| 22 Jun 2026 | 304 |
| 29 Jun 2026 | 406 |
| 6 Jul 2026 | 343 |
| 13 Jul 2026 | 310 |
| 20 Jul 2026 | 2,168 |
| 27 Jul 2026 | 916 |
| 3 Aug 2026 | 565 |
| 10 Aug 2026 | 471 |
| 17 Aug 2026 | 2,553 |
| 24 Aug 2026 | 2,797 |
| 31 Aug 2026 | 2,705 |
| 7 Sep 2026 | 1,136 |
| 14 Sep 2026 | 757 |
| 21 Sep 2026 | 2,973 |
| 28 Sep 2026 | 885 |
| 5 Oct 2026 | 1,035 |
| 12 Oct 2026 | 1,010 |
| 19 Oct 2026 | 1,018 |
| 26 Oct 2026 | 1,251 |
| 2 Nov 2026 | 263 |
Weekly downloads over the last 4 weeks are 29% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 3.16.0 |
|---|---|
| Author | Paul Ryan |
| Added | 1 Apr 2015 |
| Last updated | 21 Sep 2026 |
| Active installs | 6,000+ |
| Requires WordPress | 5.9 |
| Tested up to | 7.1.4 |
| Requires PHP | 8.1 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | cas, ldap, login, oauth, authentication |
Other plugins by this author: Insert Pages, Pager Widget, Dashboard for Pressbooks and H5P, Limit Revision Publishing
Questions
Is Authorizer still maintained?
Authorizer was last updated on 21 Sep 2026. Its Canary status is Healthy.
Is Authorizer safe?
Authorizer has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Authorizer?
The wordpress.org author is Paul Ryan. Recent committers: figureone, plugin-master. We have recorded no ownership change.
What can I use instead of Authorizer?
Plugins in the same category with a higher Canary Score: LoginWP (Formerly Peter's Login Redirect), Simple User Avatar, Gravatar Enhanced - Avatars, Profiles, and Privacy, WP User Avatars, Sidebar Login.