Skip to content
PluginCanary

CWW Companion

by Code Work Web · 1,000+ active installs · Checked 3 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

79/ 100 Canary Score
Sub-scores for CWW Companion
Ownership100
Maintenance55
Security95
Support70
Reputation70

How the score works

Quick answers

Is CWW Companion still maintained?
Yes. Last release 13 Apr 2026, 8 releases in the last 24 months. 13 Apr 2026 · wordpress.org
Who owns CWW Companion, and has it changed hands?
No change recorded. Main committer codeworkweb since May 2021. 3 Nov 2026 · SVN log
Was CWW Companion removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is CWW Companion safe?
2 known vulnerabilities, all fixed (latest in 1.3.3). Not on the exploited list. 15 Dec 2025 · Wordfence Intelligence
Is the latest CWW Companion update safe to install?
No ownership change before 1.3.9. No one-star spike after it. 13 Apr 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master28 May 2021 to 28 May 2021, 1 commits
codeworkweb29 May 2021 to 13 Apr 2026, 43 commits

2 committers recorded. No ownership change since 2021.

Maintenance

Last release
7 months ago
Releases, 24 months
8
Tested up to
6.9 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for CWW Companion
Q1 20245
Q2 20242
Q3 20241
Q4 20241
Q1 20250
Q2 20250
Q3 20250
Q4 20251
Q1 20264
Q2 20262
Q3 20260
Q4 20260

Last release 13 Apr 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months (2 on record), patched (latest fixed in 1.3.3).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Dec 2025CWW Companion <= 1.3.2 - Cross-Site Request Forgery4.3<= 1.3.21.3.3Patched before disclosure
12 Mar 2024CWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.2.71.2.8Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CWW Companion
4 May 202659
11 May 2026106
18 May 2026143
25 May 2026115
1 Jun 202661
8 Jun 202673
15 Jun 202665
22 Jun 202656
29 Jun 202662
6 Jul 202663
13 Jul 202665
20 Jul 202668
27 Jul 202683
3 Aug 202676
10 Aug 202659
17 Aug 202685
24 Aug 202652
31 Aug 202657
7 Sep 202666
14 Sep 202676
21 Sep 202674
28 Sep 202677
5 Oct 202678
12 Oct 202664
19 Oct 202682
26 Oct 2026114
2 Nov 202621

Weekly downloads over the last 4 weeks are 5% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Import / Export Customizer SettingsScore 100 · 50,000+Astra HooksScore 100 · 20,000+Arile ExtraScore 100 · 10,000+Astra Bulk EditScore 98 · 30,000+Astra WidgetsScore 96 · 200,000+

Facts

Version1.3.9
AuthorCode Work Web
Added29 May 2021
Last updated13 Apr 2026
Active installs1,000+
Requires WordPress3.0.1
Tested up to6.9.11
Requires PHP7.4
CategoryDesign & Themes > Themes & Templates
Tagscww, themes, companion, cww themes

Other plugins by this author: Popups - Submission Messages For Contact Form 7, Sticky Floating Forms Lite, CWW connector Lite - Connect Contact Form 7 & ActiveCampaign, Flash Notification, CWW Login Studio Lite - Login Security & Templates

Questions

Is CWW Companion still maintained?

Yes. Last release 13 Apr 2026, 8 releases in the last 24 months.

Who owns CWW Companion, and has it changed hands?

No change recorded. Main committer codeworkweb since May 2021.

Was CWW Companion removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is CWW Companion safe?

2 known vulnerabilities, all fixed (latest in 1.3.3). Not on the exploited list.

Is the latest CWW Companion update safe to install?

No ownership change before 1.3.9. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue