Skip to content
PluginCanary

BulletProof Security

Fewer than 10 active installs · Checked 3 Nov 2026
Avoid8 Criticals1 Warning

Avoid: BulletProof Security is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10 because the plugin is closed.

Sub-scores for BulletProof Security
Ownership100
Maintenance10
Security35
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 11 May 2016 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.25 May 2016Evidence
  • CriticalSEC-2Vulnerability published 17 Mar 2016 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.31 Mar 2016Evidence
  • CriticalSEC-2Vulnerability published 5 Nov 2014 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Nov 2014Evidence
  • CriticalSEC-2Vulnerability published 5 Nov 2014 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Nov 2014Evidence
  • CriticalSEC-2Vulnerability published 7 Oct 2014 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.21 Oct 2014Evidence
  • CriticalSEC-2Vulnerability published 30 Sep 2014 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.14 Oct 2014Evidence
  • CriticalSEC-2Vulnerability published 1 Aug 2014 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.15 Aug 2014Evidence
  • CriticalSEC-2Vulnerability published 11 May 2012 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.25 May 2012Evidence
  • WarningCLS-1Closed on wordpress.org on 30 Oct 2026, reason: false. Replace this plugin. It no longer receives updates from wordpress.org.30 Oct 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
not recorded
Releases, 24 months
0
Tested up to
not stated vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
6 Jan 2026BulletProof Security <= 6.9 - Unauthenticated Sensitive Information Exposure5.3<= 6.97.0n/a
19 Apr 2022BulletProof Security <= 6.0 - Stored Cross-Site Scripting6.1< 6.16.1n/a
22 Feb 2022BulletProof Security <= 5.7 - Admin+ Stored Cross-Site Scripting5.5< 5.85.8n/a
16 Sep 2021BulletProof Security <= 5.1 - Sensitive Information Disclosure5.3<= 5.15.2n/a
11 May 2016BulletProof Security <= .53.3 - Authenticated Cross-Site Scripting6.4< .53.4No fixn/a
17 Mar 2016BulletProof Security <= .53.2 - Cross-Site Scripting7.2<= .53.2No fixn/a
5 Nov 2014BulletProof Security < .51.1 - Cross-Site Scripting5.4< .51.1No fixn/a
5 Nov 2014BulletProof Security < .51.1 - Server-Side Request Forgery4.3<= .51No fixn/a
7 Oct 2014BulletProof Security < .51.1 - SQL Injection8.8< .51.1No fixn/a
30 Sep 2014BulletProof Security < .52.5 - Cross-Site Scripting4.8< .52.5No fixn/a
1 Aug 2014BulletProof Security <= .48.9 - Cross-Site Scripting6.1<= .48.9No fixn/a
11 May 2012BulletProof Security < .47.1 - Reflected Cross-Site Scripting6.1< .47.1No fixn/a

Source: Wordfence Intelligence.

Reputation

No ratings yet.

Momentum

Fewer than 10 active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsFewer than 10
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagsnot stated

Questions

Is BulletProof Security still maintained?

No. BulletProof Security was closed on wordpress.org on 30 Oct 2026 (false) and gets no updates there.

Is BulletProof Security safe?

BulletProof Security has 8 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns BulletProof Security?

The wordpress.org author is not listed. We have recorded no ownership change.

What can I use instead of BulletProof Security?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue