Skip to content
PluginCanary

WP Armour

WP Armour - Honeypot Anti Spam
by Dnesscarkey · 400,000+ active installs · Checked 4 Nov 2026
Healthy1 Warning

Healthy: maintained, last release 3 Sep 2026, 19 releases in 24 months, no unpatched vulnerabilities.

Only 15% of 13 support threads resolved in the last 2 months.

81/ 100 Canary Score
Sub-scores for WP Armour
Ownership100
Maintenance100
Security100
Support0
Reputation75

How the score works

Quick answers

Is WP Armour still maintained?
Yes. Last release 3 Sep 2026, 19 releases in the last 24 months. 3 Sep 2026 · wordpress.org
Who owns WP Armour, and has it changed hands?
No change recorded. Main committer dnesscarkey since Jun 2020. 4 Nov 2026 · SVN log
Was WP Armour removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Armour safe?
2 known vulnerabilities, all fixed (latest in 2.1.14). Not on the exploited list. 15 Mar 2024 · Wordfence Intelligence
Is the latest WP Armour update safe to install?
No ownership change before 2.4.02. No one-star spike after it. 6 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningSUP-1Only 15% of 13 support threads resolved in the last 2 months. Expect slow answers from the author. Have a fallback plan.3 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master11 Jun 2020 to 11 Jun 2020, 1 commits
dnesscarkey16 Jun 2020 to 3 Sep 2026, 108 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
2 months ago
Releases, 24 months
19
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for WP Armour
Q1 20247
Q2 20246
Q3 20241
Q4 20243
Q1 20254
Q2 20253
Q3 20255
Q4 20252
Q1 20260
Q2 20261
Q3 20262
Q4 20260

Last release 3 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (30 reviews). Lifetime: 5.0.

Average rating stayed at 5.0 between Q3 2026 and Q4 2026.

Rating distribution
5 star1455
4 star13
3 star3
2 star1
1 star2

Security record

2 vulnerabilities on record, all patched (latest fixed in 2.1.14).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Mar 2024WP Armour - Honeypot Anti Spam <= 2.1.13 - Reflected Cross-Site Scripting6.1<= 2.1.132.1.14Patched before disclosure
8 Feb 2021WP Armour Honeypot Anti Spam <= 1.5.6 -Cross-Site Request Forgery to Arbitrary Options Update9.6< 1.5.71.5.7Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

15% of 13 support threads resolved in the last 2 months.

Momentum

400,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Armour
4 May 20261,559
11 May 20264,603
18 May 20264,447
25 May 20264,861
1 Jun 20263,807
8 Jun 20264,005
15 Jun 20268,080
22 Jun 2026120,623
29 Jun 202646,315
6 Jul 2026158,602
13 Jul 202633,368
20 Jul 202624,464
27 Jul 202616,673
3 Aug 202614,463
10 Aug 202610,961
17 Aug 202610,481
24 Aug 202610,127
31 Aug 202610,480
7 Sep 20267,959
14 Sep 20267,920
21 Sep 20268,155
28 Sep 20268,927
5 Oct 20268,012
12 Oct 20267,028
19 Oct 202611,271
26 Oct 20268,558
2 Nov 20261,470

Weekly downloads over the last 4 weeks are 66% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Really Simple CAPTCHAScore 100 · 300,000+Invisible reCaptchaScore 100 · 70,000+Simple Login CaptchaScore 100 · 10,000+Friendly Captcha for WordPressScore 100 · 10,000+CAPTCHA 4WPScore 98 · 100,000+

Facts

Version2.4.02
AuthorDnesscarkey
Added16 Jun 2020
Last updated3 Sep 2026
Active installs400,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHPnot stated
CategorySupport & Help Desk > Help Desk & Ticketing Systems
Tagsakismet, anti-spam, comment spam, spam protection, contact form spam

Other plugins by this author: Use Any Font | Custom Font Uploader, Any Mobile Theme Switcher, Jquery Validation For Contact Form 7, Block Plugin Update

Questions

Is WP Armour still maintained?

Yes. Last release 3 Sep 2026, 19 releases in the last 24 months.

Who owns WP Armour, and has it changed hands?

No change recorded. Main committer dnesscarkey since Jun 2020.

Was WP Armour removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Armour safe?

2 known vulnerabilities, all fixed (latest in 2.1.14). Not on the exploited list.

Is the latest WP Armour update safe to install?

No ownership change before 2.4.02. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue