Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

Infility Global

by Infility · 100+ active installs · Checked 3 Nov 2026
Limited data1 Warning

Limited data: Infility Global has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

80/ 100 Canary Score
Sub-scores for Infility Global
Ownership100
Maintenance85
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Infility Global still maintained?
Yes. Last release 28 Oct 2026, 3 releases in the last 24 months. 28 Oct 2026 · wordpress.org
Who owns Infility Global, and has it changed hands?
No change recorded. Main committer infility since Jan 2025. 3 Nov 2026 · SVN log
Was Infility Global removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Infility Global safe?
15 known vulnerabilities, all fixed (latest in 2.16.25). Not on the exploited list. 20 Oct 2026 · Wordfence Intelligence
Is the latest Infility Global update safe to install?
No ownership change before 2.16.27. No one-star spike after it. 23 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master25 Jul 2022 to 25 Jul 2022, 1 commits
cjjparadoxmax26 Jul 2022 to 17 Dec 2024, 117 commits
infility3 Jan 2025 to 28 Oct 2026, 164 commits

3 committers recorded. No ownership change since 2022.

Maintenance

Last release
7 days ago
Releases, 24 months
3
Tested up to
6.8 vs 7.1
Requires PHP
7.3 supported 8.2+
Releases per quarter
Releases per quarter for Infility Global
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20263

Last release 28 Oct 2026. Tested up to 6.8, 3 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star0

Security record

15 vulnerabilities in 24 months, all patched (latest fixed in 2.16.25).

Show 15 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
20 Oct 2026Infility Global <= 2.16.24 - Missing Authorization5.3<= 2.16.242.16.25n/a
15 Aug 2026Infility Global <= 2.15.34 - Unauthenticated Stored Cross-Site Scripting via /cf7_record Log Endpoint7.2<= 2.15.342.15.35n/a
25 Jun 2026Infility Global < 2.15.19 - Authenticated (Subscriber+) SQL Injection6.5< 2.15.192.15.19n/a
25 Jun 2026Infility Global < 2.15.20 - Authenticated (Editor+) SQL Injection4.9< 2.15.202.15.20n/a
19 May 2026Infility Global <= 2.15.19 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter6.5<= 2.15.192.15.20n/a
3 Feb 2026Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass7.5<= 2.14.46Not affectedn/a
15 Jan 2026Infility Global <= 2.15.36 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.15.362.15.37n/a
31 Dec 2025Infility Global <= 2.15.36 - Unauthenticated SQL Injection7.5<= 2.15.362.15.37n/a
11 Dec 2025Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload8.8<= 2.14.422.14.43n/a
14 Aug 2025Infility Global <= 2.15.34 - Authenticated (Subscriber+) Arbitrary File Download6.5<= 2.15.342.15.35n/a
7 Jul 2025Infility Global <= 2.13.4 - Reflected Cross-Site Scripting6.1<= 2.13.42.13.5n/a
23 Jun 2025Infility Global <= 2.13.4 - Reflected Cross-Site Scripting6.1<= 2.13.4Not affectedn/a
29 May 2025Infility Global <= 2.12.7 - Authenticated (Subscriber+) SQL Injection6.5<= 2.12.7Not affectedn/a
6 Jan 2025Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update6.5<= 2.9.82.9.9n/a
6 Jan 2025Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter6.1<= 2.9.82.9.9n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

100+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.16.27
AuthorInfility
Added26 Jul 2022
Last updated28 Oct 2026
Active installs100+
Requires WordPress5.6
Tested up to6.8.12
Requires PHP7.3
Categorynot stated
Tagsglobal plugins, Comprehensive plugin

Questions

Is Infility Global still maintained?

Yes. Last release 28 Oct 2026, 3 releases in the last 24 months.

Who owns Infility Global, and has it changed hands?

No change recorded. Main committer infility since Jan 2025.

Was Infility Global removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Infility Global safe?

15 known vulnerabilities, all fixed (latest in 2.16.25). Not on the exploited list.

Is the latest Infility Global update safe to install?

No ownership change before 2.16.27. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue