Skip to content
PluginCanary

PWA

PWA - easy way to Progressive Web App
by iworks (Marcin Pietrzak) · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 20 Jul 2026, 48 releases in 24 months, no unpatched vulnerabilities.

96/ 100 Canary Score
Sub-scores for PWA
Ownership100
Maintenance90
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is PWA still maintained?
Yes. Last release 20 Jul 2026, 48 releases in the last 24 months. 20 Jul 2026 · wordpress.org
Who owns PWA, and has it changed hands?
No change recorded. Main committer iworks since Mar 2021. 3 Nov 2026 · SVN log
Was PWA removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is PWA safe?
1 known vulnerability, fixed (latest in 1.6.4). Not on the exploited list. 1 Oct 2024 · Wordfence Intelligence
Is the latest PWA update safe to install?
No ownership change before 1.8.0. No one-star spike after it. 20 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master18 Mar 2021 to 18 Mar 2021, 1 commits
iworks18 Mar 2021 to 20 Jul 2026, 87 commits

2 committers recorded. No ownership change since 2021.

Maintenance

Last release
4 months ago
Releases, 24 months
48
Tested up to
7.0 vs 7.1
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for PWA
Q1 20240
Q2 20240
Q3 20244
Q4 20245
Q1 20252
Q2 20255
Q3 20253
Q4 20250
Q1 20260
Q2 202623
Q3 202611
Q4 20260

Last release 20 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star25
4 star0
3 star0
2 star0
1 star1

Security record

1 vulnerability on record, patched (latest fixed in 1.6.4).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
1 Oct 2024PWA - easy way to Progressive Web App <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4<= 1.6.31.6.4Patched before disclosure

Changelog mentions of security fixes: 1.5.8 (nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PWA
4 May 202658
11 May 202691
18 May 202671
25 May 202684
1 Jun 202689
8 Jun 202665
15 Jun 2026897
22 Jun 2026263
29 Jun 2026174
6 Jul 2026208
13 Jul 2026141
20 Jul 2026980
27 Jul 2026224
3 Aug 2026280
10 Aug 2026158
17 Aug 2026155
24 Aug 2026114
31 Aug 2026141
7 Sep 2026139
14 Sep 2026118
21 Sep 2026119
28 Sep 2026139
5 Oct 2026121
12 Oct 2026120
19 Oct 2026145
26 Oct 2026136
2 Nov 202619

Weekly downloads over the last 4 weeks are 46% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Super Progressive Web AppsScore 98 · 40,000+PWA for WPScore 97 · 10,000+

Facts

Version1.8.0
Authoriworks (Marcin Pietrzak)
Added18 Mar 2021
Last updated20 Jul 2026
Active installs1,000+
Requires WordPress6.0
Tested up to7.0.8
Requires PHP8.0
CategorySite Administration & Utilities > Site Health & Diagnostics
Tagspwa, offline, manifest.json, add to homescreen, Progressive Web Application

Other plugins by this author: Orphans, OG - Better Share on Social Media, Omnibus - show the lowest price, upPrev, Simple Revision Control, Reading Position Indicator, Simple Consent Mode, Interactive Polish Map, WP Sitemap Control, Simple SEO Improvements, Fleet Manager, Simple CSV Table

Questions

Is PWA still maintained?

Yes. Last release 20 Jul 2026, 48 releases in the last 24 months.

Who owns PWA, and has it changed hands?

No change recorded. Main committer iworks since Mar 2021.

Was PWA removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is PWA safe?

1 known vulnerability, fixed (latest in 1.6.4). Not on the exploited list.

Is the latest PWA update safe to install?

No ownership change before 1.8.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue