Skip to content
PluginCanary

Inactive Logout

by Deepen Bajracharya · 10,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 1 Oct 2026, 60 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Inactive Logout
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Quick answers

Is Inactive Logout still maintained?
Yes. Last release 1 Oct 2026, 60 releases in the last 24 months. 1 Oct 2026 · wordpress.org
Who owns Inactive Logout, and has it changed hands?
No change recorded. Main committer j__3rk since Jan 2017. 3 Nov 2026 · SVN log
Was Inactive Logout removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Inactive Logout safe?
3 known vulnerabilities, all fixed (latest in 3.6.0). Not on the exploited list. 31 Oct 2025 · Wordfence Intelligence
Is the latest Inactive Logout update safe to install?
No ownership change before 3.6.4. No one-star spike after it. 1 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
j__3rk20 Jan 2017 to 1 Oct 2026, 179 commits
codemanas2 Feb 2022 to 16 May 2023, 30 commits

2 committers recorded. No ownership change since 2017.

Maintenance

Last release
34 days ago
Releases, 24 months
60
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Inactive Logout
Q1 20240
Q2 20244
Q3 20245
Q4 20243
Q1 202544
Q2 20257
Q3 20252
Q4 20252
Q1 20260
Q2 20261
Q3 20261
Q4 20261

Last release 1 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Average rating stayed at 5.0 between Q2 2024 and Q1 2026.

Rating distribution
5 star97
4 star3
3 star1
2 star0
1 star5
Latest low reviews

Security record

1 vulnerability in 24 months (3 on record), patched (latest fixed in 3.6.0).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
31 Oct 2025Inactive Logout <= 3.5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 3.5.53.6.0Patched before disclosure
20 Sep 2023Inactive Logout <= 3.2.2 - Missing Authorization5.3< 3.2.33.2.3489
20 Sep 2023Inactive Logout <= 3.2.2 - Cross-Site Request Forgery4.3< 3.2.33.2.3489

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Inactive Logout
4 May 2026285
11 May 2026646
18 May 2026571
25 May 2026567
1 Jun 20266,625
8 Jun 20262,167
15 Jun 20261,453
22 Jun 20261,360
29 Jun 20261,000
6 Jul 20261,356
13 Jul 2026903
20 Jul 2026973
27 Jul 2026785
3 Aug 2026700
10 Aug 2026728
17 Aug 2026661
24 Aug 2026698
31 Aug 2026637
7 Sep 20267,692
14 Sep 20262,584
21 Sep 20261,784
28 Sep 20267,097
5 Oct 20262,912
12 Oct 20261,277
19 Oct 20261,722
26 Oct 20261,333
2 Nov 2026297

Weekly downloads over the last 4 weeks are 36% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuthScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version3.6.4
AuthorDeepen Bajracharya
Added17 Jan 2017
Last updated1 Oct 2026
Active installs10,000+
Requires WordPress6.6
Tested up to7.1.4
Requires PHP7.4
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagslogout, security, idle logout, user redirection, concurrent login limit

Other plugins by this author: Video Conferencing with Zoom

Questions

Is Inactive Logout still maintained?

Yes. Last release 1 Oct 2026, 60 releases in the last 24 months.

Who owns Inactive Logout, and has it changed hands?

No change recorded. Main committer j__3rk since Jan 2017.

Was Inactive Logout removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Inactive Logout safe?

3 known vulnerabilities, all fixed (latest in 3.6.0). Not on the exploited list.

Is the latest Inactive Logout update safe to install?

No ownership change before 3.6.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue