Skip to content
PluginCanary

Gutenberg

by WordPress.org · 400,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 86 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for Gutenberg
Ownership100
Maintenance100
Security95
Support67
Reputation70

How the score works

Quick answers

Is Gutenberg still maintained?
Yes. Last release 3 Nov 2026, 86 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns Gutenberg, and has it changed hands?
No change recorded. Main committer gutenbergplugin since Jan 2021. 4 Nov 2026 · SVN log
Was Gutenberg removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Gutenberg safe?
6 known vulnerabilities, all fixed (latest in 21.9.0). Not on the exploited list. 25 Oct 2025 · Wordfence Intelligence
Is the latest Gutenberg update safe to install?
No ownership change before 24.3.1. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
aduth13 Dec 2017 to 29 Apr 2020, 19 commits
mcsf16 Feb 2018 to 8 Sep 2020, 44 commits
youknowriad21 May 2018 to 18 Aug 2021, 136 commits
lonelyvegan28 Jun 2018 to 9 Nov 2018, 19 commits
noisysocks10 Dec 2018 to 24 Jun 2020, 15 commits
gziolo18 Dec 2018 to 14 Jun 2019, 11 commits
jorgefilipecosta7 Jan 2019 to 2 Sep 2020, 33 commits
talldanwp23 Jan 2019 to 17 Jun 2026, 13 commits
iseulde6 Mar 2019 to 30 Oct 2019, 6 commits
nerrad12 Jun 2019 to 12 Jun 2019, 7 commits
swissspidy31 Jul 2019 to 23 Jan 2025, 4 commits
epiqueras18 Sep 2019 to 5 Feb 2020, 6 commits
ellatrix8 Jan 2020 to 19 Nov 2020, 15 commits
nosolosw15 Apr 2020 to 24 Dec 2020, 15 commits
isabel_brison16 Sep 2020 to 21 Oct 2020, 6 commits
zieladam7 Oct 2020 to 7 Oct 2020, 2 commits
ntsekouras2 Dec 2020 to 2 Dec 2020, 3 commits
gutenbergplugin6 Jan 2021 to 3 Nov 2026, 692 commits
dd3228 Oct 2021 to 28 Oct 2021, 1 commits
Mamaduka5 Feb 2025 to 5 Feb 2025, 2 commits

20 committers recorded. No ownership change since 2017.

Maintenance

Last release
yesterday
Releases, 24 months
86
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Gutenberg
Q1 202421
Q2 202411
Q3 20248
Q4 202411
Q1 202510
Q2 20255
Q3 20258
Q4 202511
Q1 202614
Q2 202612
Q3 202615
Q4 20263

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 3.7 (10 reviews). Lifetime: 2.1.

Average rating per quarter for Gutenberg
Q1 20264.2
Q2 20264.0
Q3 20264.1
Q4 20263.0

Average rating fell from 4.2 to 3.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star872
4 star154
3 star147
2 star224
1 star2491
Latest low reviews

Security record

1 vulnerability in 24 months (6 on record), patched (latest fixed in 21.9.0).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
25 Oct 2025Gutenberg <= 21.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 21.8.221.9.0Patched before disclosure
24 Jun 2024WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block6.4<= 18.6.018.6.11
9 Apr 2024Gutenberg 12.9.0 - 18.0.0 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block6.412.9.0 to 18.0.018.01n/a
12 Oct 2023WordPress Core 5.9-6.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Navigation Attributes6.4<= 16.8.016.8.11
18 Oct 2022WordPress Core < 6.0.3 & Gutenberg < 14.3.1 - Authenticated Cross-Site Scripting in Various Blocks6.4<= 14.3.014.3.1Patched before disclosure
11 Mar 2022WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor5.4< 12.7.212.7.2Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

67% of 6 support threads resolved in the last 2 months.

Momentum

400,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Gutenberg
4 May 2026107,925
11 May 202634,047
18 May 2026156,743
25 May 202634,811
1 Jun 2026191,669
8 Jun 202635,608
15 Jun 202699,233
22 Jun 202629,229
29 Jun 202692,387
6 Jul 2026111,298
13 Jul 2026173,594
20 Jul 202698,120
27 Jul 202697,784
3 Aug 2026177,957
10 Aug 2026105,428
17 Aug 2026102,455
24 Aug 202623,350
31 Aug 202688,768
7 Sep 202690,594
14 Sep 2026100,038
21 Sep 202628,498
28 Sep 202684,921
5 Oct 202637,588
12 Oct 202682,343
19 Oct 202628,317
26 Oct 2026110,705
2 Nov 20266,257

Weekly downloads over the last 4 weeks are 34% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version24.3.1
AuthorWordPress.org
Added16 Jun 2017
Last updated3 Nov 2026
Active installs400,000+
Requires WordPress7.0
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagsnot stated

Other plugins by this author: Classic Editor, WordPress Importer, Health Check & Troubleshooting, Two Factor, Secure Custom Fields, AI Provider for Anthropic, AI, MCP Adapter, AI Provider for OpenAI, AI Provider for Google, Create Block Theme, Debug Bar

Questions

Is Gutenberg still maintained?

Yes. Last release 3 Nov 2026, 86 releases in the last 24 months.

Who owns Gutenberg, and has it changed hands?

No change recorded. Main committer gutenbergplugin since Jan 2021.

Was Gutenberg removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Gutenberg safe?

6 known vulnerabilities, all fixed (latest in 21.9.0). Not on the exploited list.

Is the latest Gutenberg update safe to install?

No ownership change before 24.3.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue