Skip to content
PluginCanary

CodeColorer

by Dmytro Shteflyuk · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 15 Aug 2026, 3 releases in 24 months, no unpatched vulnerabilities.

95/ 100 Canary Score
Sub-scores for CodeColorer
Ownership100
Maintenance100
Security85
SupportNo data
ReputationNo data

How the score works

Quick answers

Is CodeColorer still maintained?
Yes. Last release 15 Aug 2026, 3 releases in the last 24 months. 15 Aug 2026 · wordpress.org
Who owns CodeColorer, and has it changed hands?
No change recorded. Main committer kpumuk since Apr 2007. 3 Nov 2026 · SVN log
Was CodeColorer removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is CodeColorer safe?
3 known vulnerabilities, all fixed (latest in 0.10.2). Not on the exploited list. 15 Apr 2026 · Wordfence Intelligence
Is the latest CodeColorer update safe to install?
No ownership change before 0.12.0. No one-star spike after it. 15 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
kpumuk9 Apr 2007 to 15 Aug 2026, 291 commits

1 committer recorded. No ownership change since 2007.

Maintenance

Last release
3 months ago
Releases, 24 months
3
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for CodeColorer
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20262
Q2 20260
Q3 20261
Q4 20260

Last release 15 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Rating distribution
5 star10
4 star1
3 star0
2 star0
1 star0

Security record

2 vulnerabilities in 24 months (3 on record), all patched (latest fixed in 0.10.2).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Apr 2026CodeColorer <= 0.10.1 - Unauthenticated Stored Cross-Site Scripting via 'class' attribute in 'cc' Comment Shortcode6.1<= 0.10.10.10.2Patched before disclosure
30 Dec 2025CodeColorer <= 0.10.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 0.10.10.10.273
5 Jun 2023CodeColorer <= 0.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 0.10.00.10.1Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CodeColorer
4 May 202643
11 May 202670
18 May 202669
25 May 202697
1 Jun 202659
8 Jun 202699
15 Jun 202644
22 Jun 202637
29 Jun 202657
6 Jul 202648
13 Jul 202661
20 Jul 202655
27 Jul 202658
3 Aug 202678
10 Aug 2026475
17 Aug 2026176
24 Aug 2026119
31 Aug 2026107
7 Sep 2026100
14 Sep 202698
21 Sep 2026111
28 Sep 2026143
5 Oct 2026103
12 Oct 2026123
19 Oct 2026176
26 Oct 2026134
2 Nov 202624

Weekly downloads over the last 4 weeks are 12% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version0.12.0
AuthorDmytro Shteflyuk
Added9 Apr 2007
Last updated15 Aug 2026
Active installs1,000+
Requires WordPress4.0
Tested up to7.1.4
Requires PHP7.0
CategoryContent Management > Blog & Article Publishing
Tagscode, syntax, snippet, comments, highlighting

Other plugins by this author: Ad Rotator, sCategory Permalink

Questions

Is CodeColorer still maintained?

Yes. Last release 15 Aug 2026, 3 releases in the last 24 months.

Who owns CodeColorer, and has it changed hands?

No change recorded. Main committer kpumuk since Apr 2007.

Was CodeColorer removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is CodeColorer safe?

3 known vulnerabilities, all fixed (latest in 0.10.2). Not on the exploited list.

Is the latest CodeColorer update safe to install?

No ownership change before 0.12.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue