Custom PHP Settings
Healthy: maintained, last release 20 Nov 2025, 21 releases in 24 months, no unpatched vulnerabilities.
Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.
Based on 3 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 55 |
| Security | 95 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is Custom PHP Settings still maintained?
- Yes. Last release 20 Nov 2025, 21 releases in the last 24 months. 20 Nov 2025 · wordpress.org
- Who owns Custom PHP Settings, and has it changed hands?
- No change recorded. Main committer cyclonecode since Feb 2019. 4 Nov 2026 · SVN log
- Was Custom PHP Settings removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Custom PHP Settings safe?
- 1 known vulnerability, fixed (latest in 2.3.2). Not on the exploited list. 30 Apr 2026 · Wordfence Intelligence
- Is the latest Custom PHP Settings update safe to install?
- No ownership change before 2.4.1. No one-star spike after it. 20 Nov 2025 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 24 Feb 2019 to 24 Feb 2019, 1 commits |
|---|---|
| cyclonecode | 25 Feb 2019 to 20 Nov 2025, 137 commits |
2 committers recorded. No ownership change since 2019.
Maintenance
- Last release
- 12 months ago
- Releases, 24 months
- 21
- Tested up to
- 6.8 vs 7.1
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 19 |
| Q3 2024 | 0 |
| Q4 2024 | 1 |
| Q1 2025 | 2 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 17 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 20 Nov 2025. Tested up to 6.8, 3 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.4.
Average rating stayed at 1.0 between Q2 2024 and Q1 2025.
| 5 star | 12 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 2 |
- very bad · 1 star · 19 Mar 2025
- Bad got worse · 1 star · 25 Jun 2024
Security record
1 vulnerability in 24 months, patched (latest fixed in 2.3.2).
Show 1 patched vulnerability
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Apr 2026 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | 6.1 | <= 2.3.1 | 2.3.2 | Patched before disclosure |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 107 |
|---|---|
| 11 May 2026 | 293 |
| 18 May 2026 | 282 |
| 25 May 2026 | 237 |
| 1 Jun 2026 | 226 |
| 8 Jun 2026 | 245 |
| 15 Jun 2026 | 227 |
| 22 Jun 2026 | 188 |
| 29 Jun 2026 | 209 |
| 6 Jul 2026 | 217 |
| 13 Jul 2026 | 182 |
| 20 Jul 2026 | 248 |
| 27 Jul 2026 | 247 |
| 3 Aug 2026 | 228 |
| 10 Aug 2026 | 237 |
| 17 Aug 2026 | 222 |
| 24 Aug 2026 | 203 |
| 31 Aug 2026 | 236 |
| 7 Sep 2026 | 205 |
| 14 Sep 2026 | 256 |
| 21 Sep 2026 | 242 |
| 28 Sep 2026 | 226 |
| 5 Oct 2026 | 255 |
| 12 Oct 2026 | 227 |
| 19 Oct 2026 | 414 |
| 26 Oct 2026 | 349 |
| 2 Nov 2026 | 46 |
Weekly downloads over the last 4 weeks are 12% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.4.1 |
|---|---|
| Author | cyclonecode |
| Added | 25 Feb 2019 |
| Last updated | 20 Nov 2025 |
| Active installs | 10,000+ |
| Requires WordPress | 4.1.0 |
| Tested up to | 6.8.12 |
| Requires PHP | 5.6 |
| Category | Site Administration & Utilities > Site Migration & Cloning |
| Tags | php, Apache, apache2, htaccess, settings |
Other plugins by this author: Cision Block, WP Giosg, Cision Modules, Asciify
Questions
Is Custom PHP Settings still maintained?
Yes. Last release 20 Nov 2025, 21 releases in the last 24 months.
Who owns Custom PHP Settings, and has it changed hands?
No change recorded. Main committer cyclonecode since Feb 2019.
Was Custom PHP Settings removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Custom PHP Settings safe?
1 known vulnerability, fixed (latest in 2.3.2). Not on the exploited list.
Is the latest Custom PHP Settings update safe to install?
No ownership change before 2.4.1. No one-star spike after it.