JCH Optimize
Healthy: released 16 days ago, tested with WordPress 7.1, no open vulnerabilities.
Based on 3 of 5 areas
Capped at 95: not enough support or review data for a full score.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is JCH Optimize still maintained?
- Yes. Last release 19 Oct 2026, 13 releases in the last 24 months. 19 Oct 2026 · wordpress.org
- Who owns JCH Optimize, and has it changed hands?
- No change recorded. Main committer codealfa since Nov 2014. 3 Nov 2026 · SVN log
- Was JCH Optimize removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is JCH Optimize safe?
- 6 known vulnerabilities, all fixed (latest in 6.0.1). Not on the exploited list. 7 Sep 2026 · Wordfence Intelligence
- Is the latest JCH Optimize update safe to install?
- No ownership change before 6.1.1. No one-star spike after it. 19 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
- InfoHST-1Kinsta lists this plugin as not allowed on its hosting (seen 4 Nov 2026). Check your host's rules before installing. Some hosts disable listed plugins automatically.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| codealfa | 11 Nov 2014 to 19 Oct 2026, 208 commits |
|---|
1 committer recorded. No ownership changes recorded since 2014.
Maintenance
- Last release
- 16 days ago
- Releases, 24 months
- 13
- Tested up to
- 7.1 current
- Requires PHP
- 8.1 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 1 |
| Q4 2025 | 4 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 3 |
| Q4 2026 | 3 |
Last release 19 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.4.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 4.4 |
| 5 star | 54 |
|---|---|
| 4 star | 3 |
| 3 star | 2 |
| 2 star | 4 |
| 1 star | 6 |
Security record
2 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 6.0.1).
Show 6 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 7 Sep 2026 | JCH Optimize < 6.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting | 6.4 | < 6.0.1 | 6.0.1 | Before disclosure |
| 5 Sep 2026 | JCH Optimize 4.2.1 - 5.0.0 - Authenticated (Administrator+) Path Traversal | 4.9 | 4.2.1 to 5.0.0 | 5.0.1 | Before disclosure |
| 13 May 2024 | JCH Optimize <= 4.2.0 - Authenticated (Subscriber+) Directory Traversal | 4.3 | <= 4.2.0 | 4.2.1 | 3 |
| 28 Mar 2024 | JCH Optimize <= 4.0.0 - Missing Authorization | 4.3 | <= 4.0.0 | 4.0.1 | Before disclosure |
| 8 Aug 2023 | JCH Optimize <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification | 4.3 | < 4.0.1 | 4.0.1 | Before disclosure |
| 2 Mar 2023 | JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings | 4.4 | <= 3.2.2 | 3.2.3 | Before disclosure |
Changelog mentions of security fixes: 6.0.0 (escaping); 6.0.1 (security); 6.1.0 (vulnerability, nonce, escaping).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
4,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 50 |
|---|---|
| 11 May 2026 | 192 |
| 18 May 2026 | 68 |
| 25 May 2026 | 103 |
| 1 Jun 2026 | 75 |
| 8 Jun 2026 | 69 |
| 15 Jun 2026 | 71 |
| 22 Jun 2026 | 59 |
| 29 Jun 2026 | 595 |
| 6 Jul 2026 | 653 |
| 13 Jul 2026 | 514 |
| 20 Jul 2026 | 171 |
| 27 Jul 2026 | 150 |
| 3 Aug 2026 | 162 |
| 10 Aug 2026 | 124 |
| 17 Aug 2026 | 635 |
| 24 Aug 2026 | 326 |
| 31 Aug 2026 | 193 |
| 7 Sep 2026 | 188 |
| 14 Sep 2026 | 209 |
| 21 Sep 2026 | 172 |
| 28 Sep 2026 | 172 |
| 5 Oct 2026 | 701 |
| 12 Oct 2026 | 302 |
| 19 Oct 2026 | 984 |
| 26 Oct 2026 | 309 |
| 2 Nov 2026 | 46 |
Weekly downloads over the last 4 weeks are 52% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
| Version | 6.1.1 |
|---|---|
| Author | codealfa |
| Added | 11 Nov 2014 |
| Last updated | 19 Oct 2026 |
| Active installs | 4,000+ |
| Requires WordPress | 6.7.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 8.1 |
| Category | Performance & Optimization > Caching Solutions |
| Tags | seo, cache, Optimize, pagespeed, performance |
Questions
Is JCH Optimize still maintained?
Yes. Last release 19 Oct 2026, 13 releases in the last 24 months.
Who owns JCH Optimize, and has it changed hands?
No change recorded. Main committer codealfa since Nov 2014.
Was JCH Optimize removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is JCH Optimize safe?
6 known vulnerabilities, all fixed (latest in 6.0.1). Not on the exploited list.
Is the latest JCH Optimize update safe to install?
No ownership change before 6.1.1. No one-star spike after it.