Spam Protection | Maspik
Healthy: vulnerability published 12 Aug 2026, fixed in 2.9.2.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 75 |
| Support | 80 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 5 Feb 2021 to 5 Feb 2021, 1 commits |
|---|---|
| yonifre | 8 Feb 2021 to 28 Oct 2026, 316 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 6 days ago
- Releases, 24 months
- 48
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 18 |
| Q4 2024 | 11 |
| Q1 2025 | 7 |
| Q2 2025 | 6 |
| Q3 2025 | 5 |
| Q4 2025 | 3 |
| Q1 2026 | 6 |
| Q2 2026 | 4 |
| Q3 2026 | 10 |
| Q4 2026 | 1 |
Last release 28 Oct 2026. Tested with WordPress 7.1 (current).
Support
80% of 5 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 12 Aug 2026 | Maspik – Spam blacklist <= 2.9.1 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 2.9.1 | 2.9.2 | 0 |
| 9 Sep 2025 | Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export | 4.3 | <= 2.5.6 | 2.5.7 | 0 |
| 9 Sep 2025 | Maspik <= 2.5.6 - Cross-Site Request Forgery | 4.3 | <= 2.5.6 | 2.5.7 | 0 |
| 2 Dec 2024 | Maspik – Spam blacklist <= 2.2.7 - Cross-Site Request Forgery to Plugin Settings Change | 4.3 | <= 2.2.7 | 2.2.8 | 0 |
| 2 Oct 2024 | Maspik – Spam blacklist <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 2.1.2 | 2.1.3 | 0 |
| 12 Feb 2024 | Maspik – Spam blacklist <= 0.10.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings | 4.4 | <= 0.10.6 | 0.10.7 | 0 |
| 21 Nov 2023 | Maspik – Spam blacklist <= 0.10.3 - Bypass | 5.3 | <= 0.10.3 | 0.10.4 | n/a |
| 21 Nov 2023 | Maspik – Spam blacklist <= 0.9.2 - Unauthenticated Stored Cross-Site Scripting via efas_add_to_log | 6.1 | <= 0.9.2 | 0.9.3 | 2 |
| 27 Feb 2023 | Maspik – Spam blacklist <= 0.7.8 - Cross-Site Request Forgery | 4.3 | <= 0.7.8 | 0.7.9 | n/a |
Source: Wordfence Intelligence.
Reputation
| Q2 2024 | 5.0 |
|---|---|
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q1 2025 | 3.0 |
| Q2 2025 | 5.0 |
| Q3 2025 | 5.0 |
| Q4 2025 | 5.0 |
| Q1 2026 | 5.0 |
| Q2 2026 | 4.3 |
| Q3 2026 | 5.0 |
Average rating stayed at 5.0 between Q2 2024 and Q3 2026.
| 5 star | 80 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 6 |
- Doesn’t work · 1 star · 18 Feb 2025
Momentum
30,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 5,314 |
|---|---|
| 11 May 2026 | 5,717 |
| 18 May 2026 | 3,011 |
| 25 May 2026 | 11,819 |
| 1 Jun 2026 | 2,082 |
| 8 Jun 2026 | 1,410 |
| 15 Jun 2026 | 1,148 |
| 22 Jun 2026 | 9,629 |
| 29 Jun 2026 | 2,375 |
| 6 Jul 2026 | 2,694 |
| 13 Jul 2026 | 1,168 |
| 20 Jul 2026 | 2,748 |
| 27 Jul 2026 | 10,214 |
| 3 Aug 2026 | 4,122 |
| 10 Aug 2026 | 18,245 |
| 17 Aug 2026 | 17,184 |
| 24 Aug 2026 | 16,668 |
| 31 Aug 2026 | 2,854 |
| 7 Sep 2026 | 10,652 |
| 14 Sep 2026 | 12,375 |
| 21 Sep 2026 | 11,802 |
| 28 Sep 2026 | 12,702 |
| 5 Oct 2026 | 4,791 |
| 12 Oct 2026 | 2,391 |
| 19 Oct 2026 | 2,590 |
| 26 Oct 2026 | 12,208 |
| 2 Nov 2026 | 871 |
Weekly downloads over the last 4 weeks are 35% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 3.1.4 |
|---|---|
| Author | yonifre |
| Added | 8 Feb 2021 |
| Last updated | 28 Oct 2026 |
| Active installs | 30,000+ |
| Requires WordPress | 6.2 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Security & Privacy > Spam & Bot Protection |
| Tags | spam, antispam, honeypot, anti-spam, contact forms |
Other plugins by this author: Lenix Leads Collector, Lenix scss compiler, Unique Submissions for Elementor Forms, DM Pojo Mobile Menu, Gallery Media Tags, Lenix Post External Link
Questions
Is Spam Protection | Maspik still maintained?
Spam Protection | Maspik was last updated on 28 Oct 2026. Its Canary status is Healthy.
Is Spam Protection | Maspik safe?
Spam Protection | Maspik has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Spam Protection | Maspik?
The wordpress.org author is yonifre. Recent committers: yonifre, plugin-master. We have recorded no ownership change.
What can I use instead of Spam Protection | Maspik?
Plugins in the same category with a higher Canary Score: hCaptcha for WP, ActiveLayer Anti-Spam: Spam Protection for Forms & Comments, SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce), Akismet Anti-spam: Spam Protection, CryptX.