Skip to content
PluginCanary

InfiniteWP Client

by revmakx · 200,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 17 Sep 2026, fixed in 1.13.10.

83/ 100 Canary Score
Sub-scores for InfiniteWP Client
Ownership100
Maintenance100
Security75
Support70
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 1.13.10. Update to version 1.13.10 or later.17 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 20 Aug 2026, fixed in 1.13.10. Update to version 1.13.10 or later.20 Aug 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
infinitewp2 Apr 2012 to 29 Apr 2024, 231 commits
revmakx5 Dec 2024 to 19 Aug 2026, 15 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
3 months ago
Releases, 24 months
7
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for InfiniteWP Client
Q1 20241
Q2 20241
Q3 20240
Q4 20241
Q1 20251
Q2 20251
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20263
Q4 20260

Last release 19 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
17 Sep 2026InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key6.5<= 1.13.91.13.100
20 Aug 2026InfiniteWP Client <= 1.13.9 - Authenticated (Administrator+) SQL Injection4.9<= 1.13.91.13.100
4 Aug 2026InfiniteWP Client <= 1.13.5 - Unauthenticated Administrator Account Takeover on Multi-Site8.1<= 1.13.51.13.60
7 Jan 2025InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading5.3<= 1.13.01.13.10
8 Feb 2024InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure5.9<= 1.12.31.12.3.10
14 Aug 2023InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure7.5<= 1.11.11.12.10
14 Jan 2020InfiniteWP Client <= 1.9.4.4 - Authentication Bypass9.8<= 1.9.4.41.9.4.50
25 Jan 2017InfiniteWP Client <= 1.6.0 - Unauthenticated PHP Object Injection9.8< 1.6.1.11.6.1.10
2 Dec 2014InfiniteWP Client <= 1.3.7 - Privilege Escalation9.8<= 1.3.71.3.80
2 Dec 2014InfiniteWP Client <= 1.3.7 - PHP Object Injection9.8<= 1.3.71.3.80

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for InfiniteWP Client
Q4 20233.0
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0

Average rating rose from 3.0 to 5.0 between Q4 2023 and Q4 2025.

Rating distribution
5 star142
4 star10
3 star2
2 star1
1 star22
Latest low reviews

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for InfiniteWP Client
4 May 20263,959
11 May 20267,162
18 May 20267,281
25 May 20267,351
1 Jun 20267,216
8 Jun 20267,169
15 Jun 20267,174
22 Jun 20266,773
29 Jun 20267,247
6 Jul 20266,473
13 Jul 20266,537
20 Jul 2026111,456
27 Jul 202629,219
3 Aug 202621,925
10 Aug 2026115,062
17 Aug 2026130,784
24 Aug 202633,460
31 Aug 202617,030
7 Sep 202611,114
14 Sep 202611,004
21 Sep 202610,094
28 Sep 20268,809
5 Oct 202615,744
12 Oct 20268,473
19 Oct 202610,644
26 Oct 20267,798
2 Nov 20261,078

Weekly downloads over the last 4 weeks are 69% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WP Rollback - Rollback Plugins and ThemesScore 92 · 200,000+Easy Updates ManagerScore 91 · 300,000+WP Downgrade | Specific Core VersionScore 91 · 100,000+Cloudways Site ManagerScore 91 · 50,000+The WP Remote WordPress PluginScore 91 · 30,000+

Facts

Version1.13.10
Authorrevmakx
Added2 Apr 2012
Last updated19 Aug 2026
Active installs200,000+
Requires WordPress3.1
Tested up to7.0.8
Requires PHPnot stated
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsbackup, updates, security, multi-site, Multiple admin

Other plugins by this author: Backup and Staging by WP Time Capsule, DefendWP Firewall, WPCal.io - Easy Meeting Scheduler, WP Duplicate - WordPress Migration Plugin, Super Stage WP, Kiss Feedback, Matram.io

Questions

Is InfiniteWP Client still maintained?

InfiniteWP Client was last updated on 19 Aug 2026. Its Canary status is Healthy.

Is InfiniteWP Client safe?

InfiniteWP Client has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns InfiniteWP Client?

The wordpress.org author is revmakx. Recent committers: revmakx, infinitewp, plugin-master. We have recorded no ownership change.

What can I use instead of InfiniteWP Client?

Plugins in the same category with a higher Canary Score: WP Rollback - Rollback Plugins and Themes, Easy Updates Manager, WP Downgrade | Specific Core Version, Cloudways Site Manager, The WP Remote WordPress Plugin.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue