Custom API for WP
Healthy: Custom API for WP is maintained, has no open risk signals and no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 23 Jul 2020 to 23 Jul 2020, 1 commits |
|---|---|
| cyberlord92 | 23 Jul 2020 to 27 Jan 2022, 40 commits |
| abhiladdha07 | 22 Apr 2022 to 1 Aug 2024, 30 commits |
| yashyadav247 | 3 Nov 2022 to 3 Nov 2022, 1 commits |
| mowpr | 23 Dec 2024 to 13 Oct 2026, 33 commits |
5 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 22 days ago
- Releases, 24 months
- 14
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 5.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 3 |
| Q3 2025 | 3 |
| Q4 2025 | 2 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 3 |
| Q4 2026 | 1 |
Last release 13 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 28 Jul 2025 | Custom API for WP <= 4.2.2 - Authenticated (Subscriber+) Privilege Escalation | 8.8 | <= 4.2.2 | 4.2.3 | 0 |
| 16 Jul 2025 | Custom API for WP <= 4.2.2 - Unauthenticated SQL Injection | 7.5 | <= 4.2.2 | 4.2.3 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.8 from 45 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 43 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 2 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 56 |
|---|---|
| 11 May 2026 | 87 |
| 18 May 2026 | 95 |
| 25 May 2026 | 117 |
| 1 Jun 2026 | 819 |
| 8 Jun 2026 | 229 |
| 15 Jun 2026 | 161 |
| 22 Jun 2026 | 140 |
| 29 Jun 2026 | 148 |
| 6 Jul 2026 | 202 |
| 13 Jul 2026 | 147 |
| 20 Jul 2026 | 147 |
| 27 Jul 2026 | 139 |
| 3 Aug 2026 | 716 |
| 10 Aug 2026 | 335 |
| 17 Aug 2026 | 199 |
| 24 Aug 2026 | 157 |
| 31 Aug 2026 | 740 |
| 7 Sep 2026 | 243 |
| 14 Sep 2026 | 262 |
| 21 Sep 2026 | 217 |
| 28 Sep 2026 | 821 |
| 5 Oct 2026 | 354 |
| 12 Oct 2026 | 857 |
| 19 Oct 2026 | 326 |
| 26 Oct 2026 | 345 |
| 2 Nov 2026 | 40 |
Weekly downloads over the last 4 weeks are 31% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 5.0.0 |
|---|---|
| Author | miniOrange |
| Added | 23 Jul 2020 |
| Last updated | 13 Oct 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 3.0.1 |
| Tested up to | 7.0.8 |
| Requires PHP | 5.4 |
| Category | Developer Tools & Customization > API & Webhook Integration |
| Tags | api, rest-api, custom api, external api, Custom Endpoints |
Other plugins by this author: miniOrange 2FA - Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator), Social Login, Social Sharing by miniOrange, JWT Authentication for WP REST APIs, SAML Single Sign On - SSO Login, Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents, OAuth Single Sign On - SSO (OAuth Client), Password Policy Manager, miniOrange OTP Login, Verification and SMS Notifications, Active Directory Integration / LDAP Integration, Prevent Files / Folders Access, WP OAuth Server ( Login with WordPress ), Page and Post Restriction
Questions
Is Custom API for WP still maintained?
Custom API for WP was last updated on 13 Oct 2026. Its Canary status is Healthy.
Is Custom API for WP safe?
Custom API for WP has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Custom API for WP?
The wordpress.org author is miniOrange. Recent committers: mowpr, abhiladdha07, yashyadav247, cyberlord92, plugin-master. We have recorded no ownership change.
What can I use instead of Custom API for WP?
Plugins in the same category with a higher Canary Score: MCP Adapter, WP-SCSS, Show Pages IDs, WP Reset, Query Monitor.