Skip to content
PluginCanary

Flamingo

by Rock Lobster Inc. · 800,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 18 Aug 2026, 5 releases in 24 months, no unpatched vulnerabilities.

98/ 100 Canary Score
Sub-scores for Flamingo
Ownership100
Maintenance100
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Flamingo still maintained?
Yes. Last release 18 Aug 2026, 5 releases in the last 24 months. 18 Aug 2026 · wordpress.org
Who owns Flamingo, and has it changed hands?
No change recorded. Main committer takayukister since May 2012. 4 Nov 2026 · SVN log
Was Flamingo removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Flamingo safe?
2 known vulnerabilities, all fixed (latest in 2.6.3). Not on the exploited list. 6 Sep 2026 · Wordfence Intelligence
Is the latest Flamingo update safe to install?
No ownership change before 2.6.4. No one-star spike after it. 18 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
takayukister5 May 2012 to 18 Aug 2026, 238 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
3 months ago
Releases, 24 months
5
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Flamingo
Q1 20241
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20251
Q1 20260
Q2 20261
Q3 20262
Q4 20260

Last release 18 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Average rating per quarter for Flamingo
Q4 20235.0
Q4 20245.0
Q1 20252.0
Q4 20255.0
Q2 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q2 2026.

Rating distribution
5 star76
4 star20
3 star9
2 star9
1 star7
Latest low reviews

Security record

1 vulnerability in 24 months (2 on record), patched (latest fixed in 2.6.3).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
6 Sep 2026Flamingo <= 2.6.2 - Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search5.4<= 2.6.22.6.3Patched before disclosure
15 Jan 2020Flamingo <= 2.1 - CSV Injection6.4<= 2.12.1.11

Changelog mentions of security fixes: 2.6.2 (security, vulnerability); 2.6.3 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

800,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Flamingo
4 May 20263,236
11 May 2026232,125
18 May 202669,944
25 May 202635,155
1 Jun 202628,324
8 Jun 202624,440
15 Jun 202620,608
22 Jun 202620,464
29 Jun 202619,388
6 Jul 202618,414
13 Jul 2026233,937
20 Jul 202685,098
27 Jul 202639,924
3 Aug 202632,311
10 Aug 202623,725
17 Aug 2026271,178
24 Aug 202658,460
31 Aug 202639,066
7 Sep 202632,575
14 Sep 202626,214
21 Sep 202624,785
28 Sep 202623,359
5 Oct 202623,145
12 Oct 202621,959
19 Oct 202636,853
26 Oct 202629,264
2 Nov 20264,235

Weekly downloads over the last 4 weeks are 58% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Image CAPTCHA for Contact Form 7 andScore 100 · 70,000+CF7 MateScore 100 · 20,000+Fluent PDF GeneratorScore 100 · 20,000+Gravity Forms CLI Add-OnScore 100 · 20,000+Smart Grid-Layout Design for ContactScore 100 · 10,000+

Facts

Version2.6.4
AuthorRock Lobster Inc.
Added5 May 2012
Last updated18 Aug 2026
Active installs800,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP7.4
CategoryCommunication & Messaging > Transactional Email
Tagscrm, bird, mail, contact

Other plugins by this author: Contact Form 7, Really Simple CAPTCHA, Bogo, Listo, Double Opt-In Helper

Questions

Is Flamingo still maintained?

Yes. Last release 18 Aug 2026, 5 releases in the last 24 months.

Who owns Flamingo, and has it changed hands?

No change recorded. Main committer takayukister since May 2012.

Was Flamingo removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Flamingo safe?

2 known vulnerabilities, all fixed (latest in 2.6.3). Not on the exploited list.

Is the latest Flamingo update safe to install?

No ownership change before 2.6.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue