Skip to content
PluginCanary

Invite Anyone

by Boone Gorges · 1,000+ active installs · Checked 3 Nov 2026
At risk1 Critical1 Warning

At risk: no release in 26 months (last release 19 Aug 2024).

59/ 100 Canary Score

Capped at 59: a Critical signal is open.

Sub-scores for Invite Anyone
Ownership100
Maintenance0
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Invite Anyone still maintained?
No. Last release 19 Aug 2024, over 2 years ago. 19 Aug 2024 · wordpress.org
Who owns Invite Anyone, and has it changed hands?
No change recorded. 3 Nov 2026 · SVN log
Was Invite Anyone removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Invite Anyone safe?
6 known vulnerabilities, all fixed (latest in 1.4.8). Not on the exploited list. 16 Aug 2024 · Wordfence Intelligence
Is the latest Invite Anyone update safe to install?
No ownership change before 1.4.10. No one-star spike after it. 19 Aug 2024 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalMNT-1No release in 26 months (last release 19 Aug 2024). Plan a replacement if the plugin is important to your site.19 Aug 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.6.11, 5 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
boonebgorges19 Dec 2009 to 19 Aug 2024, 418 commits

1 committer recorded. No ownership change since 2009.

Maintenance

Last release
2 years ago
Releases, 24 months
0
Tested up to
6.6 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Invite Anyone
Q1 20240
Q2 20240
Q3 20243
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 19 Aug 2024. Tested up to 6.6, 5 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star20
4 star1
3 star1
2 star2
1 star2

Security record

6 vulnerabilities on record, all patched (latest fixed in 1.4.8).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Aug 2024Invite Anyone <= 1.4.7 - Reflected Cross-Site Scripting6.1<= 1.4.71.4.8Patched before disclosure
12 Oct 2017Invite Anyone <= 1.3.18 - PHP Object Injection9.8<= 1.3.181.3.19Patched before disclosure
22 Mar 2017Invite Anyone < 1.3.16 - Cross-Site Request Forgery8.8< 1.3.161.3.161
22 Mar 2017Invite Anyone <= 1.3.15 - Improper Input Validation7.5<= 1.3.151.3.161
22 Mar 2017Invite Anyone < 1.3.16 - Email Injection7.5< 1.3.161.3.161
17 Mar 2017Invite Anyone <= 1.3.14 - Change of Email Invitation Content5.3< 1.3.151.3.15Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Invite Anyone
4 May 202628
11 May 202635
18 May 202637
25 May 202655
1 Jun 202660
8 Jun 202661
15 Jun 202643
22 Jun 202627
29 Jun 202636
6 Jul 202632
13 Jul 202650
20 Jul 202648
27 Jul 202660
3 Aug 202659
10 Aug 202668
17 Aug 202661
24 Aug 202661
31 Aug 202651
7 Sep 202658
14 Sep 202665
21 Sep 202665
28 Sep 202672
5 Oct 202678
12 Oct 202680
19 Oct 2026114
26 Oct 2026133
2 Nov 202626

Weekly downloads over the last 4 weeks are 52% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

bbPressScore 89 · 100,000+BuddyPressScore 86 · 90,000+wpForo ForumScore 86 · 20,000+Asgaros ForumScore 86 · 10,000+Better MessagesScore 85 · 10,000+

Facts

Version1.4.10
AuthorBoone Gorges
Added19 Dec 2009
Last updated19 Aug 2024
Active installs1,000+
Requires WordPress3.2
Tested up to6.6.11
Requires PHPnot stated
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagsgroup, Invite, friends, buddypress, invitations

Other plugins by this author: BuddyPress Docs, BuddyPress Group Email Subscription, Unconfirmed, bbPress Reply Titles, Custom Profile Filters for BuddyPress, WP Grade Comments, PreziWP, BuddyPress Groupblog, BP Group Management, Commons In A Box, BP MPO Activity Filter, Add User Autocomplete

Questions

Is Invite Anyone still maintained?

No. Last release 19 Aug 2024, over 2 years ago.

Who owns Invite Anyone, and has it changed hands?

No change recorded.

Was Invite Anyone removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Invite Anyone safe?

6 known vulnerabilities, all fixed (latest in 1.4.8). Not on the exploited list.

Is the latest Invite Anyone update safe to install?

No ownership change before 1.4.10. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue