Skip to content
PluginCanary

Envo Extra

by EnvoThemes · 20,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 8 Oct 2026, 20 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Envo Extra
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Quick answers

Is Envo Extra still maintained?
Yes. Last release 8 Oct 2026, 20 releases in the last 24 months. 8 Oct 2026 · wordpress.org
Who owns Envo Extra, and has it changed hands?
No change recorded. Main committer envothemes since Oct 2022. 4 Nov 2026 · SVN log
Was Envo Extra removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Envo Extra safe?
8 known vulnerabilities, all fixed (latest in 1.9.14). Not on the exploited list. 18 Feb 2026 · Wordfence Intelligence
Is the latest Envo Extra update safe to install?
No ownership change before 1.9.24. No one-star spike after it. 8 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master14 Oct 2022 to 14 Oct 2022, 1 commits
envothemes18 Oct 2022 to 8 Oct 2026, 173 commits

2 committers recorded. No ownership change since 2022.

Maintenance

Last release
27 days ago
Releases, 24 months
20
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Envo Extra
Q1 20247
Q2 202415
Q3 20242
Q4 20244
Q1 20251
Q2 20254
Q3 20251
Q4 20252
Q1 20265
Q2 20262
Q3 20261
Q4 20262

Last release 8 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star0

Security record

4 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 1.9.14).

Show 8 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
18 Feb 2026Envo Extra <= 1.9.13 - Missing Authorization4.3<= 1.9.131.9.14Patched before disclosure
5 Dec 2025Envo Extra <= 1.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.9.111.9.12Patched before disclosure
7 May 2025Envo Extra <= 1.9.9 - Missing Authorization4.3<= 1.9.91.9.10Patched before disclosure
8 Nov 2024Envo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure4.3<= 1.9.31.9.4Patched before disclosure
6 Jun 2024Envo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget6.4<= 1.8.231.8.25Patched before disclosure
15 May 2024Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting6.4<= 1.8.161.8.17Patched before disclosure
15 Apr 2024Envo Extra <= 1.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.8.111.8.12Patched before disclosure
17 Oct 2023Envo Extra <= 1.8.3 - Cross-Site Request Forgery4.3< 1.8.41.8.4Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Envo Extra
4 May 20267,395
11 May 20262,285
18 May 20262,138
25 May 20268,030
1 Jun 20261,347
8 Jun 20261,053
15 Jun 2026855
22 Jun 2026715
29 Jun 2026858
6 Jul 20261,146
13 Jul 2026916
20 Jul 2026953
27 Jul 2026910
3 Aug 2026766
10 Aug 2026702
17 Aug 20267,520
24 Aug 20261,584
31 Aug 20261,269
7 Sep 20261,117
14 Sep 20261,174
21 Sep 20261,082
28 Sep 20261,009
5 Oct 20267,200
12 Oct 20261,774
19 Oct 20261,766
26 Oct 20261,813
2 Nov 2026179

Weekly downloads over the last 4 weeks are 35% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Starter Sites & Templates by NeveScore 91 · 100,000+Sydney ToolboxScore 91 · 50,000+Import / Export Customizer SettingsScore 91 · 50,000+Clever FoxScore 91 · 30,000+Bosa Starter SitesScore 91 · 30,000+

Facts

Version1.9.24
AuthorEnvoThemes
Added18 Oct 2022
Last updated8 Oct 2026
Active installs20,000+
Requires WordPress4.9
Tested up to7.1.4
Requires PHP5.6
CategoryE-commerce & Shopping
Tagsdemo, elementor, envothemes, woocommerce

Other plugins by this author: Envo's Templates & Widgets for Elementor and WooCommerce, EnvoThemes Demo Import, EnvoThemes Demo Importer for KingComposer, Envo Blocks - Store Templates, Blocks & Layouts for WooCommerce

Questions

Is Envo Extra still maintained?

Yes. Last release 8 Oct 2026, 20 releases in the last 24 months.

Who owns Envo Extra, and has it changed hands?

No change recorded. Main committer envothemes since Oct 2022.

Was Envo Extra removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Envo Extra safe?

8 known vulnerabilities, all fixed (latest in 1.9.14). Not on the exploited list.

Is the latest Envo Extra update safe to install?

No ownership change before 1.9.24. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue