Skip to content
PluginCanary

Builderall for WordPress

Fewer than 10 active installs · Checked 3 Nov 2026
Avoid6 Criticals

Avoid: Builderall for WordPress is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10 because the plugin is closed.

Sub-scores for Builderall for WordPress
Ownership100
Maintenance10
Security5
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 9 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 9 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 9 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Sep 2026Evidence
  • CriticalCLS-1Closed on wordpress.org on 19 Aug 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.19 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 25 Feb 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.11 Mar 2026Evidence
  • CriticalSEC-2Vulnerability published 23 Oct 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Nov 2025Evidence
  • InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
not recorded
Releases, 24 months
0
Tested up to
not stated vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Sep 2026Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter4.3<= 3.0.2No fixn/a
9 Sep 2026Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting6.4<= 3.0.2No fixn/a
9 Sep 2026Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' Setting6.4<= 3.0.2No fixn/a
20 Jul 2026Builderall for WordPress <= 3.0.1 - Missing Authorization to Unauthenticated OAuth Update5.3<= 3.0.13.0.2n/a
25 Feb 2026Builderall for WordPress <= 3.0.1 - Authenticated (Contributor+) Remote Code Execution8.8<= 3.0.1No fixn/a
23 Oct 2025Builderall Builder for WordPress <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.0.1No fixn/a
29 Mar 2024Builderall Builder for WordPress <= 2.0.1 - Unauthenticated Server-Side Request Forgery7.2<= 2.0.12.0.2n/a

Source: Wordfence Intelligence.

Reputation

No ratings yet.

Momentum

Fewer than 10 active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsFewer than 10
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategoryMarketing & Advertising > Email Marketing & Campaigns
Tagsnot stated

Questions

Is Builderall for WordPress still maintained?

No. Builderall for WordPress was closed on wordpress.org on 19 Aug 2026 (security issue) and gets no updates there.

Is Builderall for WordPress safe?

Builderall for WordPress has 5 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns Builderall for WordPress?

The wordpress.org author is not listed. We have recorded no ownership change.

What can I use instead of Builderall for WordPress?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue