Skip to content
PluginCanary

Canvas

by codesupplyco · 9,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 12 Jul 2026, 10 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for Canvas
Ownership100
Maintenance90
Security95
SupportNo data
Reputation60

How the score works

Quick answers

Is Canvas still maintained?
Yes. Last release 12 Jul 2026, 10 releases in the last 24 months. 12 Jul 2026 · wordpress.org
Who owns Canvas, and has it changed hands?
No change recorded. Main committer codesupplyco since Oct 2019. 3 Nov 2026 · SVN log
Was Canvas removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Canvas safe?
1 known vulnerability, fixed (latest in 2.5.3). Not on the exploited list. 12 Jun 2026 · Wordfence Intelligence
Is the latest Canvas update safe to install?
No ownership change before 2.5.5. No one-star spike after it. 12 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
codesupplyco28 Oct 2019 to 12 Jul 2026, 139 commits

1 committer recorded. No ownership change since 2010.

Maintenance

Last release
4 months ago
Releases, 24 months
10
Tested up to
7.0 vs 7.1
Requires PHP
5.4 supported 8.2+
Releases per quarter
Releases per quarter for Canvas
Q1 20241
Q2 20240
Q3 20242
Q4 20242
Q1 20250
Q2 20254
Q3 20250
Q4 20250
Q1 20261
Q2 20262
Q3 20261
Q4 20260

Last release 12 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.1.

Rating distribution
5 star6
4 star0
3 star0
2 star1
1 star1

Security record

1 vulnerability in 24 months, patched (latest fixed in 2.5.3).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
12 Jun 2026Canvas <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attribute6.4<= 2.5.22.5.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

9,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Canvas
4 May 2026328
11 May 2026302
18 May 2026603
25 May 20263,666
1 Jun 20261,011
8 Jun 20264,308
15 Jun 2026856
22 Jun 2026561
29 Jun 2026439
6 Jul 2026780
13 Jul 20264,790
20 Jul 2026747
27 Jul 2026612
3 Aug 2026581
10 Aug 2026380
17 Aug 2026391
24 Aug 2026389
31 Aug 2026378
7 Sep 2026328
14 Sep 2026321
21 Sep 2026324
28 Sep 2026332
5 Oct 2026363
12 Oct 2026308
19 Oct 2026446
26 Oct 2026360
2 Nov 202656

Weekly downloads over the last 4 weeks are 67% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.5.5
Authorcodesupplyco
Added28 Oct 2019
Last updated12 Jul 2026
Active installs9,000+
Requires WordPress5.6
Tested up to7.0.8
Requires PHP5.4
CategoryDesign & Themes > Page Builders & Visual Editors
Tagspage, theme, template

Other plugins by this author: Advanced Popups, Powerkit - Supercharge your WordPress Site, Absolute Reviews, Sight - Professional Image Gallery and Portfolio, Supercharger AI - Ultimate Engagement Toolkit, Canvas Portfolio

Questions

Is Canvas still maintained?

Yes. Last release 12 Jul 2026, 10 releases in the last 24 months.

Who owns Canvas, and has it changed hands?

No change recorded. Main committer codesupplyco since Oct 2019.

Was Canvas removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Canvas safe?

1 known vulnerability, fixed (latest in 2.5.3). Not on the exploited list.

Is the latest Canvas update safe to install?

No ownership change before 2.5.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue