Skip to content
PluginCanary

Image Hotspot by DevVN

by Le Van Toan · 20,000+ active installs · Checked 4 Nov 2026
Healthy1 Warning

Healthy: maintained, last release 11 Dec 2025, 2 releases in 24 months, no unpatched vulnerabilities.

Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

80/ 100 Canary Score
Sub-scores for Image Hotspot by DevVN
Ownership100
Maintenance50
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Image Hotspot by DevVN still maintained?
Yes. Last release 11 Dec 2025, 2 releases in the last 24 months. 11 Dec 2025 · wordpress.org
Who owns Image Hotspot by DevVN, and has it changed hands?
No change recorded. Main committer levantoan since Sep 2016. 4 Nov 2026 · SVN log
Was Image Hotspot by DevVN removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Image Hotspot by DevVN safe?
2 known vulnerabilities, all fixed (latest in 1.3.0). Not on the exploited list. 18 Feb 2026 · Wordfence Intelligence
Is the latest Image Hotspot by DevVN update safe to install?
No ownership change before 1.3.0. No one-star spike after it. 11 Dec 2025 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
levantoan26 Sep 2016 to 11 Dec 2025, 45 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
11 months ago
Releases, 24 months
2
Tested up to
6.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Image Hotspot by DevVN
Q1 20242
Q2 20240
Q3 20245
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20251
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 11 Dec 2025. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star23
4 star1
3 star1
2 star0
1 star4
Latest low reviews

Security record

1 vulnerability in 24 months (2 on record), patched (latest fixed in 1.3.0).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
18 Feb 2026Image Hotspot by DevVN <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Field Meta6.4<= 1.2.91.3.0Patched before disclosure
23 Aug 2024Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection8.8<= 1.2.51.2.6Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Image Hotspot by DevVN
4 May 2026291
11 May 2026583
18 May 2026598
25 May 2026607
1 Jun 2026543
8 Jun 2026485
15 Jun 2026499
22 Jun 2026448
29 Jun 2026424
6 Jul 2026444
13 Jul 2026425
20 Jul 2026496
27 Jul 2026501
3 Aug 2026503
10 Aug 2026400
17 Aug 2026421
24 Aug 2026429
31 Aug 2026442
7 Sep 2026422
14 Sep 2026457
21 Sep 2026500
28 Sep 2026517
5 Oct 2026453
12 Oct 2026416
19 Oct 2026584
26 Oct 2026538
2 Nov 202680

Weekly downloads over the last 4 weeks are 13% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version1.3.0
AuthorLe Van Toan
Added26 Sep 2016
Last updated11 Dec 2025
Active installs20,000+
Requires WordPress4.6
Tested up to6.9.11
Requires PHPnot stated
CategoryContent Management > Media Library & Asset Management
Tagsmaps, image, points, hotspot, image hotspot

Other plugins by this author: Vietnam Checkout for WooCommerce, DevVn Float Left Right Ads, DevVN Local Store, DevVN - Trang trí Tết Việt Nam, DevVN Snow, eSMS, VHT SMS

Questions

Is Image Hotspot by DevVN still maintained?

Yes. Last release 11 Dec 2025, 2 releases in the last 24 months.

Who owns Image Hotspot by DevVN, and has it changed hands?

No change recorded. Main committer levantoan since Sep 2016.

Was Image Hotspot by DevVN removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Image Hotspot by DevVN safe?

2 known vulnerabilities, all fixed (latest in 1.3.0). Not on the exploited list.

Is the latest Image Hotspot by DevVN update safe to install?

No ownership change before 1.3.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue