Skip to content
PluginCanary

iframe

by webvitalii · 60,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 17 May 2026, 2 releases in 24 months, no unpatched vulnerabilities.

95/ 100 Canary Score
Sub-scores for iframe
Ownership100
Maintenance85
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is iframe still maintained?
Yes. Last release 17 May 2026, 2 releases in the last 24 months. 17 May 2026 · wordpress.org
Who owns iframe, and has it changed hands?
No change recorded. Main committer webvitaly since Apr 2011. 4 Nov 2026 · SVN log
Was iframe removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is iframe safe?
7 known vulnerabilities, all fixed (latest in 5.1). Not on the exploited list. 22 May 2024 · Wordfence Intelligence
Is the latest iframe update safe to install?
No ownership change before 6.0. No one-star spike after it. 24 Nov 2025 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
webvitaly28 Apr 2011 to 17 May 2026, 117 commits

1 committer recorded. No ownership change since 2011.

Maintenance

Last release
6 months ago
Releases, 24 months
2
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for iframe
Q1 20241
Q2 20241
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 17 May 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Rating distribution
5 star46
4 star2
3 star0
2 star1
1 star7
Latest low reviews

Security record

7 vulnerabilities on record, all patched (latest fixed in 5.1).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
22 May 2024iframe <= 5.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode5<= 5.05.1Patched before disclosure
14 May 2024iframe <= 5.0 - Authenticated (Contributor+ Stored Cross-Site Scripting6.4<= 5.05.17
28 Dec 2023iFrame <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via srcdoc5<= 4.84.9Patched before disclosure
25 Sep 2023iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode6.4<= 4.64.7Patched before disclosure
7 May 2020iframe <= 4.4 - Authenticated Stored Cross Site Scripting6.1<= 4.44.5Patched before disclosure
11 Aug 2015iFrame <= 3.0 - Reflected Cross-Site Scripting6.1<= 3.04.0Patched before disclosure
10 Aug 2015iFrame <= 4.0 - Stored Cross-Site Scripting6.4<= 4.04.11

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

60,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for iframe
4 May 2026393
11 May 20261,174
18 May 20261,184
25 May 20261,103
1 Jun 20261,048
8 Jun 20261,115
15 Jun 20261,055
22 Jun 20261,074
29 Jun 2026964
6 Jul 20261,027
13 Jul 2026997
20 Jul 20261,254
27 Jul 20261,104
3 Aug 20261,138
10 Aug 20261,185
17 Aug 20261,070
24 Aug 20261,085
31 Aug 20261,076
7 Sep 2026873
14 Sep 20261,104
21 Sep 20261,261
28 Sep 20261,031
5 Oct 20261,055
12 Oct 20261,012
19 Oct 20261,890
26 Oct 20261,305
2 Nov 2026193

Weekly downloads over the last 4 weeks are 3% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Easy Video PlayerScore 100 · 20,000+Video GalleryScore 100 · 10,000+Video PopupScore 100 · 10,000+Embed Plus for YouTube GalleryScore 98 · 100,000+VideopackScore 98 · 10,000+

Facts

Version6.0
Authorwebvitalii
Added28 Apr 2011
Last updated17 May 2026
Active installs60,000+
Requires WordPress3.0
Tested up to7.0.8
Requires PHPnot stated
CategoryContent Management > Document Management & Downloads
Tagsembed, vimeo, iframe, youtube, Google Maps

Other plugins by this author: Page-list, Filenames to latin, Sitekit, Login-Logout, Extra Shortcodes, Taxonomy Checklist Tree, Security-Protection, Search by Google, info, Comments-advanced, Easy-to-use, Ip2country

Questions

Is iframe still maintained?

Yes. Last release 17 May 2026, 2 releases in the last 24 months.

Who owns iframe, and has it changed hands?

No change recorded. Main committer webvitaly since Apr 2011.

Was iframe removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is iframe safe?

7 known vulnerabilities, all fixed (latest in 5.1). Not on the exploited list.

Is the latest iframe update safe to install?

No ownership change before 6.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue