Cornerstone
Avoid: vulnerability published 25 Jun 2026 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 10 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 25 Jun 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.9 Jul 2026Evidence
- CriticalSEC-2Vulnerability published 25 Jun 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.9 Jul 2026Evidence
- CriticalSEC-2Vulnerability published 16 Jun 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.30 Jun 2026Evidence
- CriticalSEC-2Vulnerability published 4 Jun 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.18 Jun 2026Evidence
- CriticalSEC-2Vulnerability published 6 Oct 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.20 Oct 2025Evidence
- InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| Archetyped | 30 Dec 2010 to 12 Sep 2026, 47 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 53 days ago
- Releases, 24 months
- 0
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 12 Sep 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 25 Jun 2026 | Cornerstone < 7.8.8 - Missing Authorization | 4.3 | < 7.8.8 | No fix | n/a |
| 25 Jun 2026 | Cornerstone < 7.8.9 - Missing Authorization | 4.3 | < 7.8.9 | No fix | n/a |
| 16 Jun 2026 | Cornerstone < 7.8.8 - Authenticated (Subscriber+) SQL Injection | 6.5 | < 7.8.8 | No fix | n/a |
| 4 Jun 2026 | Cornerstone < 7.8.8 - Authenticated (Subscriber+) Arbitrary Code Execution | 8.8 | < 7.8.8 | No fix | n/a |
| 6 Oct 2025 | Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 7.7.3 | No fix | n/a |
| 26 Apr 2024 | Cornerstone <= 0.8.0 - Reflected Cross-Site Scripting | 6.1 | <= 0.8.0 | 0.8.1 | 0 |
| 16 Apr 2024 | Cornerstone <= 0.8.0 - Reflected Cross-Site Scripting via PHP_SELF | 6.1 | <= 0.8.0 | 0.8.1 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.0 from 6 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 4 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 1 |
- Cornerstone disappointing and a total waste of time · 1 star · 11 Feb 2017
Momentum
20,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 57 |
|---|---|
| 11 May 2026 | 120 |
| 18 May 2026 | 77 |
| 25 May 2026 | 90 |
| 1 Jun 2026 | 165 |
| 8 Jun 2026 | 183 |
| 15 Jun 2026 | 185 |
| 22 Jun 2026 | 159 |
| 29 Jun 2026 | 178 |
| 6 Jul 2026 | 178 |
| 13 Jul 2026 | 162 |
| 20 Jul 2026 | 222 |
| 27 Jul 2026 | 179 |
| 3 Aug 2026 | 215 |
| 10 Aug 2026 | 203 |
| 17 Aug 2026 | 199 |
| 24 Aug 2026 | 184 |
| 31 Aug 2026 | 196 |
| 7 Sep 2026 | 233 |
| 14 Sep 2026 | 249 |
| 21 Sep 2026 | 247 |
| 28 Sep 2026 | 265 |
| 5 Oct 2026 | 279 |
| 12 Oct 2026 | 213 |
| 19 Oct 2026 | 267 |
| 26 Oct 2026 | 279 |
| 2 Nov 2026 | 45 |
Weekly downloads over the last 4 weeks are 8% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 0.8.1 |
|---|---|
| Author | Archetyped |
| Added | 30 Dec 2010 |
| Last updated | 12 Sep 2026 |
| Active installs | 20,000+ |
| Requires WordPress | 5.3 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | cms, sections, structure, management, organization |
Other plugins by this author: Simple Lightbox, Favicon Rotator, Eyes Only
Questions
Is Cornerstone still maintained?
Cornerstone was last updated on 12 Sep 2026. Its Canary status is Avoid.
Is Cornerstone safe?
Cornerstone has 5 published vulnerabilities with no patched version. Its Canary status is Avoid.
Who owns Cornerstone?
The wordpress.org author is Archetyped. Recent committers: Archetyped, plugin-master. We have recorded no ownership change.
What can I use instead of Cornerstone?
Plugins in the same category with a higher Canary Score: Fusion Page Builder, SKT Page Builder, Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages, Beaver Builder Page Builder - Drag and Drop Website Builder, Colibri Page Builder.